That isn't helping. But the process perf metrics are obtained by querying osquery itself on the

processes

table, which is parsing the corresponding

proc

files on linux