From 8949723bdcefb74080adb553b5951dda0f759cd7 Mon Sep 17 00:00:00 2001 From: Steven Palmesano <3100993+spalmesano0@users.noreply.github.com> Date: Mon, 15 Dec 2025 01:07:07 -0600 Subject: [PATCH] Add detail for how to create a scheduled query (#37070) Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com> --- articles/queries.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/articles/queries.md b/articles/queries.md index 4b50186aac..e48b32985b 100644 --- a/articles/queries.md +++ b/articles/queries.md @@ -87,6 +87,8 @@ The query may take several seconds to complete because Fleet has to wait for the Fleet allows you to schedule queries to run at a set interval. By default, queries that run on a schedule will only target platforms compatible with that query. This behavior can be overridden by setting the platforms in **Advanced options** when saving a query. +To create a scheduled query, set the interval to a value other than "Never" when [creating a query](#create-a-query). If the query has already been created, select the query and then select **Edit query** to set the interval. + Scheduled queries will send data to Fleet and/or your [log destination](https://fleetdm.com/docs/using-fleet/log-destinations) automatically. Query automations can be turned off in **Advanced options** or using the bulk query automations UI. How to configure query automations in bulk: