Hey @thor ’Thought I’d pass on a couple of observations that may or may not impinge on the log file creation and database queries that seemed to be a theme a while back. I’m using 3.3.0 on Win10 and saw a behavior of the service showing indications of successfully stopping and being in stopped state, while the osquery daemon remained still running in the background. In one case it was running/holding/adding to the log files, in another it was holding the LOCK file and other files under the database until manually released. I am wondering the effects that might have on state for repeated restarts. My usage is perhaps quite non-standard running locally with repeated reconfigurations and service stop/starts so my perception of this issue might or might not be novel. I am doing this in conjunction with malware inspection. Also I realize this may no longer be pertinent due to changes in the next version but I thought I’d pass it along just in case.