Hi I installed fleet server and generated rpm package for li

Question

Hi I installed fleet server and generated rpm package for linux and msi package for windows but once installed I have to go to gui every time and click on Refresh to refresh pc data is it possible to enable auto refresh agent to send data automatically every few minutes

Kathy Satterlee · Answer

Hi < Ibra> There are several intervals you can set in your configuration It sounds like you may be looking for the `osquery detail update interval` which is set to 30 min by default You can check out all of the configuration options in the If that doesn t answer your question just let me know more about the info you re wanting to keep more up to date and I ll be happy to take a look

Ibra · Answer

Hi < Kathy Satterlee> thanks for your reply but I used this for server side installation and it does not allow me to change parameters can you tell me how to install it on centos using the source code instead of the Fleet bin file i used the bin file by downloading the tar gz and then used fleetctl to generate the packages do you know how to install it via source code so I can make all the possible changes

Ibra · Answer

Do I have to install osquery separately on the server and on the agents I know it is included in the package that is generated under the name orbit

Ibra · Answer

when i do fleet help i can see ```osquery node key size 24 host identifier provided enroll cooldown 0s status log plugin filesystem result log plugin filesystem label update interval 1h0m0s policy update interval 1h0m0s detail update interval 1h0m0s status log file result log file enable log rotation false max jitter percent 10 enable async host processing false async host collect interval 30s async host collect max jitter percent 10 async host collect lock timeout 1m0s async host collect log stats interval 1m0s async host insert batch 2000 async host delete batch 2000 async host update batch 1000 async host redis pop count 1000 async host redis scan keys count 1000 min software last opened at diff 1h0m0s```

Ibra · Answer

it s correct

Kathy Satterlee · Answer

Yes that s the Fleet server s osquery configuration You can apply the configuration values you want to your existing installation using environmental variables ```FLEET OSQUERY DETAIL UPDATE INTERVAL=30m``` By applying a flag when starting the server ```fleet serve osquery detail update interval=30m``` Or by creating a ` yml` file with the value s you want to set ```osquery detail update interval 30m``` And then specifying that file when starting the server ```fleet serve config lt your file gt yml```

Kathy Satterlee · Answer

If you re using the command specified in that guide to start the server ``` usr bin fleet serve mysql address=127 0 0 1 3306 mysql database=fleet mysql username=root mysql password=toor redis address=127 0 0 1 6379 server cert= tmp server cert server key= tmp server key logging json``` The simplest closest to what you re already doing option would be to add it as a command line flag to that command ``` usr bin fleet serve mysql address=127 0 0 1 3306 mysql database=fleet mysql username=root mysql password=toor redis address=127 0 0 1 6379 server cert= tmp server cert server key= tmp server key osquery detail update interval=30m logging json```

Kathy Satterlee · Answer

I used 30 minutes in all of my examples but you can pick the time that works best for you slightly smiling face

Ibra · Answer

thanks however if I have the variable set to 30 minutes why do some devices update after 1 hour

Ibra · Answer

I am going to update the osquery variable by setting 5 minutes and I would like to figure out how to do auto fetch on the server so that it always goes and gets the data from osquery without my access

Ibra · Answer

If I go to change the variable now does it also take the change for hosts already entered Do I have to go and regenerate the msi package