https://github.com/osquery/osquery logo
Title
a

Alejandro

02/27/2020, 4:29 PM
Also a question regarding query packs. If a host falls (as per the tagging) into two different query packs, do we know the logic for the set of queries that are run in the host? The union of both? what if same query is on both packs but with different settings (ie intervals, logging etc)?
z

zwass

02/28/2020, 4:44 PM
A host will receive each pack that is targeted to that host. The same query can be in different packs and the relevant settings will apply.
a

Alejandro

03/02/2020, 9:33 AM
thanks @zwass for the confirmation