My understanding is that, osquery agent will perio...
# general
y
My understanding is that, osquery agent will periodically poll FleetDM to get any scheduled-queries/live-queries that need to executed, so do we have an option to change the polling interval of osquery through fleet? Or the mechanism is different?
j
You can look at the osqeury flag
distributed_interval
flag in osquery. It can be changed using the osquery settings page in fleetDM (assuming you have configured osquery to get the config from tls)
y
Thanks, but
distributed_interval
is for live queries right? Not for scheduled queries ?
j
I thought your question was for live queries, afaik scheduled queries interval is configured in the pack in FleetDM and retrieved with the configuration so there is no other polling involved for the execution.
y
well thanks! will look more into this