Title
#fleet
Mystery Incorporated

Mystery Incorporated

07/28/2021, 11:48 AM
Got me proper baffled why some accept the config change and others do not
Rachel Perkins

Rachel Perkins

07/28/2021, 3:39 PM
Yeah, that's odd. Refetching the host data while its online, is it still showing 10 seconds?
Mystery Incorporated

Mystery Incorporated

07/29/2021, 10:01 AM
Yea even when I refetch or I live query the device, it doesn't seem to change
10:05 AM
10:05 AM
two are on 1 min 30s and 2 are on 10s
10:09 AM
Here is my config (I have now set interval to 60 to see if they like it better but none seem to have grabbed that config yet)
1:14 PM
@Rachel Perkins actually I think the blame is "interval" might not be the correct key to use? i can't find anywhere in the documentation that tells us what key to use to specify the config refresh rate?
1:23 PM
I FIGURED IT OUT
1:24 PM
I had tried "config_tls_refresh: 90" as a value previously, i had just totally guessed that and I thought that it didn't work, however I guess a few agents updated using that value before I changed it to "interval: 90"
1:25 PM
I can see that config_tls_refresh is depricated as per osquery documentation, and I looked at flags file generated by fleet an d I can see it is using config_refresh and so I am using config_refresh: 90 now and it is working
Rachel Perkins

Rachel Perkins

07/29/2021, 3:57 PM
Ahhh! Yeah, kinda confusing when they're paired as
config_refresh
and
config__tls__endpoint
Glad you figured it out!