Hello, would you please tell me what impact will fleet and osquery have on the osquery client when fleet and osquery communications are cut off?Will the regular query task set on the Fleet server continue?
12/16/2020, 5:20 PM
The osquery client will continue to run the same scheduled queries, buffering the results until it reconnects to the Fleet server.
12/21/2020, 1:41 AM
Ok, so where are the results of the buffering stored?
12/21/2020, 1:45 AM
Those results are stored in the local osquery RocksDB store.