Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
w
wennan.he
01/29/2023, 10:44 AMHi Fleet team, i am checking the code and seems the response of distributed_read is supposed to contains three elements
Queries: queries,
Discovery: discovery,
Accelerate: accelerate,r
Rachel Perkins
01/30/2023, 3:05 PMHi Wennan! Yeah, the Accelerate response is omitted when it's empty.
It's usually added when a host is recently enrolled to allow for restricted labels to run quickly
https://github.com/fleetdm/fleet/blob/main/server/service/osquery.go#L570
Hope that answered your question!
w
wennan.he
01/30/2023, 9:41 PMso may i ask when fleet will set it with a particular val, and when it is empty?
r
Rachel Perkins
02/01/2023, 5:06 PMIt looks like it is set with 10 when the host name or platform haven't been returned yet