I1113 16:23:50.762336 26588 distributed.cpp:119] E...
# general
f
I1113 162350.762336 26588 distributed.cpp:119] Executing distributed query: 724f79c1-f846-46a3-bc6f-dd09b7719f6a: select * from process_events; I1113 162400.358839 26589 sqlite_util.cpp:223] DBManager contention: opening transient SQLite database I1113 162401.581199 26589 sqlite_util.cpp:223] DBManager contention: opening transient SQLite database I1113 162417.574219 26111 config.cpp:1033] Refreshing configuration state I1113 162417.574730 26111 tls.cpp:240] TLS/HTTPS POST request to URI: https://osquery_server:443/config I1113 162418.353731 26589 scheduler.cpp:97] Executing scheduled query file_events: SELECT * FROM file_events; I1113 162418.460072 26589 sqlite_util.cpp:223] DBManager contention: opening transient SQLite database I1113 162424.653455 26589 sqlite_util.cpp:223] DBManager contention: opening transient SQLite database I1113 162440.553293 26589 sqlite_util.cpp:223] DBManager contention: opening transient SQLite database I1113 162454.652942 26589 sqlite_util.cpp:223] DBManager contention: opening transient SQLite database I1113 162500.549073 26589 database.cpp:135] Resetting the database plugin: rocksdb I1113 162500.764065 26589 rocksdb.cpp:134] Opening RocksDB handle: /var/osquery/osquery.db I1113 162509.051517 26102 auditdnetlink.cpp:196] Releasing the audit handle... I1113 162509.051959 26102 auditdnetlink.cpp:546] Uninstalling the audit rules we have installed I1113 162509.054347 26102 auditdnetlink.cpp:561] Restoring the default configuration for the audit service I1113 162513.051352 26102 init.cpp:157] Cannot stop event publisher threads or services