// Define a schedule of queries:
"schedule": {
// This is a simple example query that outputs basic system information.
"system_info": {
// The exact query to run.
"query": "SELECT hostname, cpu_brand, physical_memory FROM system_info;",
// The interval in seconds to run this query, not an exact interval.
"interval": 1
}
},Changed the interval for default system_info query inside osquery.conf to "interval" : 1 , then restarted Osqueryd.exe in my windows box. Then I don't see the log inside osqueryd.results.log after waiting several minutes. Is there anything else I need to do to have a change in interval for query schedule.