https://github.com/osquery/osquery logo
#fleet
Title
# fleet
d

demonbhao

12/16/2020, 3:55 AM
Hello, would you please tell me what impact will fleet and osquery have on the osquery client when fleet and osquery communications are cut off?Will the regular query task set on the Fleet server continue?
z

zwass

12/16/2020, 5:20 PM
The osquery client will continue to run the same scheduled queries, buffering the results until it reconnects to the Fleet server.
d

demonbhao

12/21/2020, 1:41 AM
Ok, so where are the results of the buffering stored?
z

zwass

12/21/2020, 1:45 AM
Those results are stored in the local osquery RocksDB store.
d

demonbhao

12/21/2020, 2:24 AM
Okay, got it. Thanks for answering👍
3 Views