Vinny
Lucas Rodriguez
fleetctl get queries --yaml > queries.yml # edit queries.yaml change 300 -> smaller seconds value fleetctl apply -f queries.yml