Hello again! Could you please help me to understand some details about “instance” host_identifier? Where is it actually stored? And in what cases can it change? Reboot? Reinstall/update Osquery? I am trying to solve problems for identifying users’ endpoints when hostnames can be duplicated (like default “MacBook Pro”), which leads to problems with enroll. It seems that uuid is a good option for users, not servers. We tried the instance, but it seemed that after reinstalling / updating osquery, the entries are duplicated in the flit.

The instance identifier is stored in the database and generated once using a random uuid generator

Does “uuid” work instead?

@theopolis hi! We started to test, so I will answer after couple of days :)

uuid is my recommendation but there’s nothing that enforces machines to use truly unique uuids :) and practically you may find that virtual machines reuse static/know uuids.