Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hello everyone. Is there a book answer as to why Fleet uses over a gig of data per day? Is there a way we can reduce that size coming from the clients to our fleet server?

Thank you for the reply. We don't run any automated queries. We just set it up and it basically sits there in the case that we need to run queries against a system.

I think it may be the policies constantly running to check compliance. I can't find a way to disable certain ones or make them run less often. Their documentation isn't much help.