Hi folks! I’m seeing some kind of odd performance regression on osx.
Sometimes, osquery causes my opendirectoryd to burn CPU. In my case, it seems to be related to cross joins on the user table. The straight wall clock time is reasonably indicative.
Using the query
SELECT uid,version FROM users CROSS JOIN chrome_extensions USING (uid) WHERE identifier='aomjjhallfgjeglblehebfpbcfeobpgk'
as an example
osquery 3.3.2 completes in .3s
osquery head takes in 30s