Mystery Incorporated
08/01/2021, 11:16 AMosquery_detail_update_interval: 25m
the refetch rate doesn't seem to change is that expected or not? it's not clear.zwass
08/01/2021, 8:05 PMMystery Incorporated
08/02/2021, 3:25 AMzwass
08/02/2021, 3:17 PMMystery Incorporated
08/06/2021, 4:26 AMlogger_plugin: tls
config_refresh: 90
pack_delimiter: /
logger_tls_period: 5
distributed_plugin: tls
disable_distributed: false
logger_tls_endpoint: /api/v1/osquery/log
distributed_interval: 95
distributed_tls_max_attempts: 5
osquery_detail_update_interval: 25m
zwass
08/06/2021, 3:18 PMdistributed_interval
is a flag on osquery. It's how often osquery will make a distributed query request to Fleet. osquery_detail_update_interval
is a flag on Fleet. It's how often Fleet will respond to a distributed query request with the detail queries. Does this help clear things up?Mystery Incorporated
08/07/2021, 6:52 AMzwass
08/08/2021, 7:34 PMMystery Incorporated
08/09/2021, 1:15 AM