# Osquery in new space not working

**URL:** <https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869>\
**Category:** Kibana\
**Tags:** osquery-manager\
**Created:** [November 26, 2022, 10:21pm UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869 "2022-11-26T22:21:44Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![lamp123432](https://avatars.discourse-cdn.com/v4/letter/l/7993a0/32.png) [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Post date:** [November 26, 2022, 10:21pm UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869/1 "2022-11-26T22:21:44Z")

</div>

Why does this keep happening? Osquery packs only work from the Default space, any other space where I created a new pack, this happens:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/0/003b59587afc3660bc1307d1fff18cf572e92b93.png)

---

<div class="post-metadata">

**Author:** ![Tomasz\_Ciecierski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tomasz_ciecierski/32/85031_2.png) [@Tomasz\_Ciecierski](https://discuss.elastic.co/u/Tomasz_Ciecierski)\
**Post date:** [November 28, 2022, 12:18pm UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869/2 "2022-11-28T12:18:20Z")

</div>

Hey @lamp123432, I am Tomasz and I am working on the Osquery integration's team. I am not sure what the issue is just yet, but I am going to investigate right away and hopefully get you updated pretty soon. Sorry for the inconvenience 🙇‍♂️

---

<div class="post-metadata">

**Author:** ![Tomasz\_Ciecierski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tomasz_ciecierski/32/85031_2.png) [@Tomasz\_Ciecierski](https://discuss.elastic.co/u/Tomasz_Ciecierski)\
**Post date:** [November 28, 2022, 4:47pm UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869/3 "2022-11-28T16:47:06Z")

</div>

@lamp123432 thanks for raising this issue, the fix is on its way, and should be available to you as soon v8.5.3 or v8.6.0 get released (not sure what version you're on right now).  
Hope this helps!

---

<div class="post-metadata">

**Author:** ![lamp123432](https://avatars.discourse-cdn.com/v4/letter/l/7993a0/32.png) [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Post date:** [December 2, 2022, 12:22am UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869/4 "2022-12-02T00:22:03Z")

</div>

Thanks a lot, was I the one that made you guys aware of this issue? Very glad to hear a fix is coming so soon! I'm loving this integration, I see lots of potential, especially for patch management and tracking vulnerabilities.

A bit off-topic, but any plans on having a search to some CVE database in the future that can flag old versions of applications with critical vulnerabilities on a Windows endpoint let's say that Osquery finds?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 29, 2022, 11:20pm UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869/5 "2022-12-29T23:20:36Z")

</div>



---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 26, 2023, 11:21pm UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869/6 "2023-01-26T23:21:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
