SK
03/30/2021, 12:18 PM--osquery_host_identifier=instance
in 3.9.0? We started using it but normally we have around 6k systems and it is already now at almost 60k, I already changed the Host Expiry Window
to 1 day, but it is still accumulating. It seems to happen to at least Osquery v4.1.2 and v4.2.0, it creates 100+ entries for same system and if I look at "Last Seen" it looks like it creates a new entry every 5 minutes. Has anyone else noticed this behavior? It happens on different kinds of systems some VM and Laptops.zwass
03/30/2021, 6:39 PM--verbose --tls_dump
logs from osquery on those systems? It would be helpful to try to understand why they are re-enrolling.SK
03/30/2021, 6:42 PMzwass
03/30/2021, 6:43 PMSK
03/30/2021, 6:46 PMinstance
option.zwass
03/30/2021, 6:49 PMSK
03/30/2021, 7:41 PMinstance
but wasn't expecting this behavior.