Hi Fleet team, in which situation will make all the hosts trying to pull config, i c there is traffic of /api/v1/osquery/config rushing in which is also shown in the below screenshot. we have around 12K hosts, and it has more than 100K calls in an hr with /api/v1/osquery/config.

Each host will check in for its configuration on the interval defined by

config_refresh

. 100k calls per hour for 12k hosts does not seem unusual, though you can change the config if you want it to happen less often.

i did figure that out which is caused by full disk