Hi folks, i have this query i use for getting osqueryd metrics:

select i.*, p.resident_size, p.user_time, p.system_time, time.minutes as counter from osquery_info i, processes p, time where p.pid = i.pid;

I noticed that

resident_size

steadily increases over time. Here's from one endpoint over the course of 60 days: