https://github.com/osquery/osquery logo
Title
w

wennan.he

11/12/2022, 1:48 AM
Hi Fleet team, in which situation will make all the hosts trying to pull config, i c there is traffic of /api/v1/osquery/config rushing in which is also shown in the below screenshot. we have around 12K hosts, and it has more than 100K calls in an hr with /api/v1/osquery/config.
z

zwass

11/14/2022, 12:59 AM
Each host will check in for its configuration on the interval defined by
config_refresh
. 100k calls per hour for 12k hosts does not seem unusual, though you can change the config if you want it to happen less often.
w

wennan.he

11/15/2022, 7:05 PM
i did figure that out which is caused by full disk