if testing a fallocate big file + split 100k, osqu...
# general
j
if testing a fallocate big file + split 100k, osquery will spike cpu/IO even if path is in exclude_path. also tried to exclude in fim sql query but does not seem to solve it. in both case, still osquery spiking. sysdig capture shows lot of futex call mostly and poll as second on osquery.db/*.sst files