From aa562c3a52485fd45ce5bdf4f322ed5bce44d39b Mon Sep 17 00:00:00 2001 From: Zach Wasserman Date: Tue, 9 Mar 2021 15:37:11 -0800 Subject: [PATCH] Set default config_refresh in fleet flags This ensures we don't end up in a state where osquery does not check in for config updates. --- pkg/osquery/flags.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pkg/osquery/flags.go b/pkg/osquery/flags.go index ca7376660e..f5abeb82cd 100644 --- a/pkg/osquery/flags.go +++ b/pkg/osquery/flags.go @@ -13,6 +13,10 @@ func FleetFlags(fleetURL *url.URL) []string { "--enroll_tls_endpoint=" + path.Join(prefix, "/api/v1/osquery/enroll"), "--config_plugin=tls", "--config_tls_endpoint=" + path.Join(prefix, "/api/v1/osquery/config"), + // Osquery defaults config_refresh to 0 which is probably not ideal for + // a client connected to Fleet. Users can always override this in the + // config they serve via Fleet. + "--config_refresh=60", "--disable_distributed=false", "--distributed_plugin=tls", "--distributed_tls_max_attempts=10",