Hello, would you please tell me what impact will fleet and osquery have on the osquery client when fleet and osquery communications are cut off?Will the regular query task set on the Fleet server continue?
z
zwass
12/16/2020, 5:20 PM
The osquery client will continue to run the same scheduled queries, buffering the results until it reconnects to the Fleet server.
d
demonbhao
12/21/2020, 1:41 AM
Ok, so where are the results of the buffering stored?
z
zwass
12/21/2020, 1:45 AM
Those results are stored in the local osquery RocksDB store.