Title
#general
y

Yash Boura

08/10/2021, 8:45 AM
My understanding is that, osquery agent will periodically poll FleetDM to get any scheduled-queries/live-queries that need to executed, so do we have an option to change the polling interval of osquery through fleet? Or the mechanism is different?
j

Juan Alvarez

08/10/2021, 8:50 AM
You can look at the osqeury flag
distributed_interval
flag in osquery. It can be changed using the osquery settings page in fleetDM (assuming you have configured osquery to get the config from tls)
y

Yash Boura

08/10/2021, 11:07 AM
Thanks, but
distributed_interval
is for live queries right? Not for scheduled queries ?
j

Juan Alvarez

08/10/2021, 11:41 AM
I thought your question was for live queries, afaik scheduled queries interval is configured in the pack in FleetDM and retrieved with the configuration so there is no other polling involved for the execution.
y

Yash Boura

08/10/2021, 12:00 PM
well thanks! will look more into this