Hey channel. I was asked a question I never thought of: can we run osqueryd in a specified hour (i.e. after 5PM EST) other than just using “internal” for every X minutes? Curious what the community has been doing on that end. Thank you !

Osquery does not have the capability to schedule for a specific time. Generally I think this is because (a) what happens if the machine is asleep at that time? and (b) what happens if the time is changed?