I used Linux AARCH64 successfully to install the elastic agent on two of my raspberry pi's. Which is fantastic. I wasn't expecting it to work.
However, osquery searches don't appear to be working against both raspberry pi's. The live query's just never return results. Maybe because of ARM or other compatibility issues.
I did want to give feedback on this though.
1 Like
Thank you for giving it a try.
The first beta release of osquerybeat is disabled for ARM intentionally.
The osquery has an official ARM distro in beta
which we could potentially pick up in the next releases:
https://osquery.io/blog/linux-arm64-beta-support
3 Likes
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.