There might be a significant issue with the Linux daemon. I haven’t deep dived but https://github.com/osquery/osquery/issues/5793 looks serious