Zachary Case
09/09/2021, 10:01 PM--disable_events=false
and --enable_bpf_events=true
are set, will this cause osquery to use significantly more memory?
currently I'm testing the 5.0.0 pre-release and am seeing osquery keeps restarting because it exceeds it's memory limit, I've upped the limit to 1G with --watchdog_memory_limit=1000
but I am still seeing memory limits exceeded on some hostsMike Myers
09/10/2021, 12:04 AMZachary Case
09/10/2021, 1:36 AMStefano Bonicatti
09/10/2021, 8:43 AMtop -n 1 -b -p $(pgrep -d',' -f osqueryd)
would be useful too, when reproducing that issue.Matt Uebel
09/10/2021, 12:18 PMDebian 4.19.194-3~deb9u1