--disable-events=false

[ychaouche]

This flag is needed to process events, otherwise you get "virtual_table.cpp:969] Table socket_events is event-based but events are disabled"

[palantirtech]

Thanks for your interest in palantir/osquery-configuration, @ychaouche! Before we can accept your pull request, you need to sign our contributor license agreement - just visit https://cla.palantir.com/ and follow the instructions. Once you sign, I'll automatically update this pull request.

[ychaouche]

it seems there's an issue with the CI pipeline.