Adrian Junge

01/04/2023, 10:58 AM
Hello everyone, i've got another question regarding the behaviour of fleet/osqueryd. When a fleet client doesn't have any internet connection, so can't communicate with the fleet server and there are some queries scheduled, are these queries still being executed and the results saved until the results can be send to the server?


01/04/2023, 11:21 AM
This is correct, the results will be buffered and sent to the Fleet server when the host is online again. You can configure the maximum number of logs that are buffered by providing the
flag to osquery (docs)