In the scenario osquery is disconnected and configured with scheduled queries the results are buffered. What if I disable the scheduled queries before sending? Are those results deleted? Will be sent if I re-enable that query later?
s
seph
01/11/2023, 2:53 PM
I’d recommend checking, but i would expect them to remain buffered.