@amacgregor: that's odd that you're exceeding 100MB of private memory allocation, but I do see it on some of my hosts too. If you want to disable the limit enforcements use --watchdog_level=-1 in your CLI args or add that to the flagfile: https://osquery.readthedocs.io/en/stable/installation/cli-flags/