https://github.com/osquery/osquery logo
Title
m

Mystery Incorporated

10/20/2021, 3:20 AM
I feel like it could be named better as
osquery.jitter
suggests jitter for all osquery things. Maybe it would be better in the logger area as
logger_tls_period_jitter
in that case?
t

Tomas Touceda

10/20/2021, 2:06 PM
it's jitter on when fleet sends certain queries, such as labels and policies, to the hosts. Scheduled queries are a different matter, and that is something that goes through a separate mechanism
👀 1
m

Mystery Incorporated

10/21/2021, 6:52 AM
It's a bit confusing because you have splay which is jitter on when queries execute, and then something called
osquery.jitter
that only jitters whatever those certain things are.