when I enable a pack on kolide, what is the default time when this pack is propagated to the osquery agents? and where I can configure it?
s
seph
02/18/2020, 2:48 PM
Are you asking how long it takes to get to the endpoints? I’m not sure how long (if at all) fleet caches config generation, but launcher polls that every couple minutes.
seph
02/18/2020, 2:49 PM
On the launcher side, it’s a compiled value
seph
02/18/2020, 2:49 PM
You can see what configuration a client has by looking at the
osquery_schedule
table.
seph
02/18/2020, 2:50 PM
Note that when a new config is loaded, a query will run within the interval period. not immediately. So if you have an interval of 1 day. you may not see results until 1 day.