wennan.he
01/11/2023, 12:39 AMorbit_info
SELECT
on every distributed/read
(we could alternatively add some small interval for this specific query, if need be). We will use the cached_mysql to not perform unnecessary token insertions on every distributed/write
. Also token updating should do a INSERT ON DUPLICATE KEY token=token
, and not update updated_at
.
is this supposed to work out only osquery is hosted in orbit? if we don'r run osquery by orbit, this return info doesn't impact, is my understand correct?Kathy Satterlee
01/11/2023, 11:43 PMorbit_info
is only collected only when using Orbit