<@UAVTQ3Z8D> sounds like the rocksdb is not cachin...
# general
c
@OMAR sounds like the rocksdb is not caching your results correctly. I might try wiping
/var/osquery.db
(assuming you don’t require the other information to be cached — this is destructive) and see if that takes care of the issue