https://github.com/osquery/osquery logo
a

allister

06/28/2021, 6:49 AM
I assume this has been asked before, but… if I have a client hooked up to a TLS server with multi-day intervals and I want to trigger it to re-run all queries in the pack 'scoped' to the client, there's no way to restart the interval counter via HUP'ing daemons or something client-side, is there?
s

seph

06/28/2021, 10:54 AM
I don't think there's a client side way. From the the server you can change the epoch. We've talked about some kind of acceleration for scheduled queries on boot, but it's just talk
3 Views