Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
a
AoS
07/07/2019, 10:54 AM
Can you think of a reason why a host would return results twice?
z
zwass
07/07/2019, 8:53 PM
In the context of a live query? Or a scheduled query?
a
AoS
07/08/2019, 7:05 AM
Live query
z
zwass
07/08/2019, 6:41 PM
It shouldn't happen, but is it possible that your query takes longer to run than the
distributed_interval
you have configured?
a
AoS
07/11/2019, 8:25 AM
I think it's possible, for some reason it's set to 10
3 Views
#kolide
Join Slack