Hello i have 2 questions: • For security assessment, I am asked to document the root privileges osquery requires. Where can i find this information • What is the maximum numbers of servers which can be connected to a single fleet instance Thank you

osqueryd

needs to run with

root

or

system

permissions. On macOS, querying user data also requires Full Disk Access. The maximum number of hosts really depends on the resources available to the Fleet server. I generally recommend checking out the reference architectures to get a feel for what will be needed for your deployment.