Might want to checks out these issues. May or may not be related. https://github.com/facebook/osquery/issues/4433 https://github.com/facebook/osquery/issues/4235