HarlanF
04/20/2023, 8:13 PMosquery_schedule
is really only supposed to keep track of stats on schedule queries for the life of the osqueryd daemon. Even given that, we only see three fields filled out--name, query, interval--and everything else is 0 across tens of thousands of machines.--connect /var/osquery/osquery.em
in order to acces stats from osqueryd. Mostly zeroes.John Speno
04/20/2023, 9:03 PMinterval
values are you seeing?HarlanF
04/20/2023, 11:16 PMseph
HarlanF
04/21/2023, 1:57 AMseph
HarlanF
04/21/2023, 4:15 PM