osquery-1/osquery/events
Teddy Reed 57c6b2a521 Revive the OS X kernel-based publishers (#2083)
The OS X kernel subscribers have not been starting because they expect the
publisher thread to run before they begin configuration. Due to some recent
refactors the publisher thread creation now occurs after configuration.

The subscriber logic to check for a valid kernel connection is still valid.

This commit has two additional side-effects:
- The RocksDB plugin is modified to use 3 background merge threads.
- The OS X kernel publisher syncing thread is now non-blocking.
2016-05-11 11:47:42 -07:00
..
benchmarks 1. Reorganize RocksDB database handle into a plugin 2016-03-06 20:40:16 -08:00
darwin Use the default shutdown flow within extensions 2016-03-20 01:45:49 -07:00
freebsd [osquery] Update copyright headers to new format. 2016-02-11 11:48:58 -08:00
kernel Revive the OS X kernel-based publishers (#2083) 2016-05-11 11:47:42 -07:00
linux Add linux syslog virtual table 2016-03-30 13:36:57 -07:00
tests Expire data when record is before expire time 2016-03-16 12:35:06 -07:00
CMakeLists.txt Build debug packages 2016-03-15 08:58:01 -07:00
events.cpp Add linux syslog virtual table 2016-03-30 13:36:57 -07:00
kernel.cpp Revive the OS X kernel-based publishers (#2083) 2016-05-11 11:47:42 -07:00
kernel.h Revive the OS X kernel-based publishers (#2083) 2016-05-11 11:47:42 -07:00