anyone could help

Question

anyone could help

Daniel Cross · Answer

Here the agent is told every 10s check for queries from Fleet Every 10s send logs Every 1minute check for any config updates

wennan.he · Answer

can i say there is http connection between agent and fleet

Kathy Satterlee · Answer

I m not quite sure what you re asking there < wennan he> Can you clarify a little for me

wennan.he · Answer

< Kathy Satterlee> what i mean should i see a http access from each host install agent to fleet every 10 s

Kathy Satterlee · Answer

Thanks Yes with those settings every host would check for queries to run and send any logs every 10 seconds and check for configuration updates every 60 seconds

wennan.he · Answer

that is weird our fleet already been running over 6 months but we never seen that huge connections before recently

wennan.he · Answer

and do you know is there anyway i can check the change history of this value also i checked the doc it looks like either agent side or server side can change the value of distributed interval right

Kathy Satterlee · Answer

Pulling up some docs for you slightly smiling face

Kathy Satterlee · Answer

It s definitely interesting that this is new behavior though Have y all updated Fleet or changed configuration recently

wennan.he · Answer

hold on new behavior what does it mean it didn t exist for earlier version of fleet

wennan.he · Answer

yes we did upgrade fleet recently

wennan.he · Answer

so could u tell me distributed interval comes out with which version of fleet

Kathy Satterlee · Answer

I meant that you haven t seen this on your server before

wennan.he · Answer

i didn t notice that that is what i mean

Kathy Satterlee · Answer

Here are the options you ll want to set in agent options it s a bit of a balancing act between limiting requests and making live queries useful ```distributed interval=10 logger tls period=3 config refresh=3600```

wennan.he · Answer

so it is only configureable at agent side

Kathy Satterlee · Answer

They are agent settings but you can also set them in `agent options options` on the Fleet side <https fleetdm com docs using fleet fleet ui update agent options|https fleetdm com docs using fleet fleet ui update agent options>