Title
#fleet
w

wennan.he

09/16/2022, 3:29 AM
anyone could help?
d

Daniel Cross

09/16/2022, 3:33 AM
Here the agent is told every 10s check for queries from Fleet. Every 10s send logs. Every 1minute check for any config updates.
w

wennan.he

09/16/2022, 3:42 AM
can i say there is http connection between agent and fleet?
Kathy Satterlee

Kathy Satterlee

09/16/2022, 5:32 PM
I'm not quite sure what you're asking there, @wennan.he. Can you clarify a little for me?
w

wennan.he

09/16/2022, 8:16 PM
@Kathy Satterlee what i mean should i see a http access from each host install agent to fleet every 10 s?
Kathy Satterlee

Kathy Satterlee

09/16/2022, 8:41 PM
Thanks! Yes, with those settings, every host would check for queries to run and send any logs every 10 seconds and check for configuration updates every 60 seconds.
w

wennan.he

09/16/2022, 8:44 PM
that is weird, our fleet already been running over 6 months, but we never seen that huge connections before recently.
8:47 PM
and do you know is there anyway i can check the change history of this value? also, i checked the doc, it looks like either agent side or server side can change the value of distributed_interval, right?
Kathy Satterlee

Kathy Satterlee

09/16/2022, 8:50 PM
Pulling up some docs for you 🙂
8:51 PM
It's definitely interesting that this is new behavior though. Have y'all updated Fleet or changed configuration recently?
w

wennan.he

09/16/2022, 8:51 PM
hold on. new behavior? what does it mean, it didn't exist for earlier version of fleet?
8:51 PM
yes, we did upgrade fleet recently
8:52 PM
so could u tell me distributed_interval comes out with which version of fleet?
Kathy Satterlee

Kathy Satterlee

09/16/2022, 8:54 PM
I meant that you haven't seen this on your server before.
w

wennan.he

09/16/2022, 8:57 PM
i didn't notice that. that is what i mean.
Kathy Satterlee

Kathy Satterlee

09/16/2022, 9:04 PM
Here are the options you'll want to set in agent options: it's a bit of a balancing act between limiting requests and making live queries useful
distributed_interval=10
logger_tls_period=3
config_refresh=3600
w

wennan.he

09/16/2022, 9:23 PM
so it is only configureable at agent side?
Kathy Satterlee

Kathy Satterlee

09/16/2022, 10:55 PM
They are agent settings, but you can also set them in
agent_options.options
on the Fleet side. https://fleetdm.com/docs/using-fleet/fleet-ui#update-agent-options