there’s also a whole document on testing performance for your queries https://github.com/facebook/osquery/blob/master/docs/wiki/deployment/performance-safety.md