spookerlabs
02/25/2021, 7:08 PMconfig_refresh:10
to 60 as other fields I changed but looking into new drilldown it seems like nothing changed. Is it possible to change config_refresh using fleetctl ?zwass
spookerlabs
02/25/2021, 7:32 PMzwass
--verbose --tls_dump
and see if it receives the expected value from Fleet?spookerlabs
02/25/2021, 7:45 PMI0225 16:44:25.828430 314369 smbios_tables.cpp:105] Reading SMBIOS from sysfs DMI node
I0225 16:44:25.828779 314369 config.cpp:890] Calling configure for logger tls
I0225 16:44:40.829082 314369 config.cpp:1205] Refreshing configuration state
I0225 16:44:40.829715 314369 tls.cpp:254] TLS/HTTPS POST request to URI: <https://localhost:8412/api/v1/osquery/config>
{
"decorators": {
"load": [
"SELECT uuid AS host_uuid FROM system_info;",
"SELECT hostname AS hostname FROM system_info;"
]
},
"options": {
"config_refresh": 17,
"disable_distributed": false,
"distributed_interval": 37,
"distributed_plugin": "tls",
"distributed_tls_max_attempts": 3,
"logger_plugin": "tls",
"logger_tls_endpoint": "/api/v1/osquery/log",
"logger_tls_period": 47,
"pack_delimiter": "/"
}
}
zwass
spookerlabs
02/25/2021, 7:46 PMzwass
spookerlabs
02/25/2021, 7:47 PMzwass
spookerlabs
02/26/2021, 12:18 AMzwass
spookerlabs
02/27/2021, 12:20 AM