Hey, Guys need some help. Suddenly osqueryd stop sending data to our server via tls, and on the endpoint it' making /config call. Can some provide me some reference that i can look to fix this issue. I checked online but didn't get anything, following are the logs from the endpoint. Feb 14 131013 malik-Latitude-3420 osqueryd[66578]: I0214 131013.226481 66578 eventfactory.cpp:*156*] Event publisher not enabled: BPFEventPublisher: Publisher disabled via configuration Feb 14 131013 malik-Latitude-3420 osqueryd[66578]: I0214 131013.226547 66578 eventfactory.cpp:*156*] Event publisher not enabled: inotify: Publisher disabled via configuration Feb 14 131013 malik-Latitude-3420 osqueryd[66578]: I0214 131013.226616 66578 syslog.cpp:*173*] Successfully opened pipe for syslog ingestion: /var/osquery/syslog_pipe Feb 14 131015 malik-Latitude-3420 osqueryd[66578]: I0214 131015.388950 66578 events.cpp:*70*] Skipping subscriber: apparmor_events: Subscriber disabled via configuration Feb 14 131024 malik-Latitude-3420 osqueryd[66578]: I0214 131024.775241 66578 eventsubscriberplugin.cpp:*493*] Found 174 events for subscriber udev.hardware_events Feb 14 131026 malik-Latitude-3420 osqueryd[66578]: I0214 131026.797221 66578 eventsubscriberplugin.cpp:*493*] Found 476 events for subscriber auditeventpublisher.process_events Feb 14 131029 malik-Latitude-3420 osqueryd[66578]: I0214 131029.048409 66578 events.cpp:*70*] Skipping subscriber: process_file_events: Subscriber disabled via configuration Feb 14 131031 malik-Latitude-3420 osqueryd[66578]: I0214 131031.488863 66578 events.cpp:*70*] Skipping subscriber: seccomp_events: Seccomp subscriber disabled via configuration Feb 14 131033 malik-Latitude-3420 osqueryd[66578]: I0214 131033.698776 66578 events.cpp:*70*] Skipping subscriber: selinux_events: Subscriber disabled via configuration Feb 14 131036 malik-Latitude-3420 osqueryd[66578]: I0214 131036.066705 66578 eventsubscriberplugin.cpp:*493*] Found 553 events for subscriber auditeventpublisher.socket_events Feb 14 131112 malik-Latitude-3420 osqueryd[1001]: osqueryd worker (66578) stopping: Maximum sustainable CPU utilization limit 2400ms exceeded for 57 seconds Feb 14 131112 malik-Latitude-3420 osqueryd[1001]: W0214 131112.014720 1100 watcher.cpp:*425*] osqueryd worker (66578) stopping: Maximum sustainable CPU utilization limit 2400ms exceeded for 57 seconds Feb 14 131116 malik-Latitude-3420 osqueryd[1001]: W0214 131116.016691 1100 watcher.cpp:*463*] osqueryd worker (66578) could not be stopped. Sending kill signal. Feb 14 131116 malik-Latitude-3420 osqueryd[1001]: I0214 131116.218675 1100 watcher.cpp:*721*] osqueryd watcher (1001) executing worker (66823) Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.235244 66823 init.cpp:*410*] osquery worker initialized [watcher=1001] Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.235499 66823 dispatcher.cpp:*78*] Adding new service: WatcherWatcherRunner (0x5fda465f3308) to thread: 135923008276032 (0x5fda465f0af0) in process 66823 Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.235575 66823 rocksdb.cpp:*90*] Opening RocksDB handle: /mnt/data/osquery.db Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.394032 66823 init.cpp:*712*] An error occurred during extension manager startup: Extensions disabled Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.394125 66823 auto_constructed_tables.cpp:*107*] Removing stale ATC entries Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.395318 66823 dispatcher.cpp:*78*] Adding new service: ConfigRefreshRunner (0x5fda466fe338) to thread: 135922641274432 (0x5fda46722a30) in process 66823 Feb 14 131116 malik-Latitude-3420 osqueryd[66823]: I0214 131116.395675 66823 tls.cpp:*263*] TLS/HTTPS POST request to URI: https://prodserver.com/config Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.539822 66823 virtual_table.cpp:*1226*] Not attaching pending table: shield Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.544298 66823 auto_constructed_tables.cpp:*255*] ATC table: shield Registered Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.544577 66823 dispatcher.cpp:*78*] Adding new service: TLSLogForwarder (0x5fda469d9318) to thread: 135922651760192 (0x5fda466ccbf0) in process 66823 Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.544662 66823 system.cpp:*237*] Using host identifier: 4c4c4544-0056-4c10-8047-c2c04f4d4c33 Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.545037 66823 eventfactory.cpp:*156*] Event publisher not enabled: BPFEventPublisher: Publisher disabled via configuration Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.545073 66823 eventfactory.cpp:*156*] Event publisher not enabled: inotify: Publisher disabled via configuration Feb 14 131117 malik-Latitude-3420 osqueryd[66823]: I0214 131117.545117 66823 syslog.cpp:*173*] Successfully opened pipe for syslog ingestion: /var/osquery/syslog_pipe Feb 14 131119 malik-Latitude-3420 osqueryd[66823]: I0214 131119.765445 66823 events.cpp:*70*] Skipping subscriber: apparmor_events: Subscriber disabled via configuration Feb 14 131128 malik-Latitude-3420 osqueryd[66823]: I0214 131128.254643 66823 eventsubscriberplugin.cpp:*493*] Found 174 events for subscriber udev.hardware_events Feb 14 131130 malik-Latitude-3420 osqueryd[66823]: I0214 131130.361163 66823 eventsubscriberplugin.cpp:*493*] Found 476 events for subscriber auditeventpublisher.process_events Feb 14 131132 malik-Latitude-3420 osqueryd[66823]: I0214 131132.436612 66823 events.cpp:*70*] Skipping subscriber: process_file_events: Subscriber disabled via configuration Feb 14 131134 malik-Latitude-3420 osqueryd[66823]: I0214 131134.442174 66823 events.cpp:*70*] Skipping subscriber: seccomp_events: Seccomp subscriber disabled via configuration Feb 14 131136 malik-Latitude-3420 osqueryd[66823]: I0214 131136.574249 66823 events.cpp:*70*] Skipping subscriber: selinux_events: Subscriber disabled via configuration Feb 14 132031 malik-Latitude-3420 osqueryd[68093]: I0214 132031.899142 68093 auto_constructed_tables.cpp:*107*] Removing stale ATC entries Feb 14 132031 malik-Latitude-3420 osqueryd[68093]: I0214 132031.900728 68093 dispatcher.cpp:*78*] Adding new service: ConfigRefreshRunner (0x61fe11a13338) to thread: 127674502612544 (0x61fe119cddb0) in process 68093 Feb 14 132031 malik-Latitude-3420 osqueryd[68093]: I0214 132031.901223 68093 tls.cpp:*263*] TLS/HTTPS POST request to URI: https://prodserver.com/config Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.993400 68093 virtual_table.cpp:*1226*] Not attaching pending table: shield Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.997690 68093 auto_constructed_tables.cpp:*255*] ATC table: shield Registered Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.997942 68093 dispatcher.cpp:*78*] Adding new service: TLSLogForwarder (0x61fe11cab418) to thread: 127674513098304 (0x61fe11a13300) in process 68093 Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.998016 68093 system.cpp:*237*] Using host identifier: 4c4c4544-0056-4c10-8047-c2c04f4d4c33 Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.998406 68093 eventfactory.cpp:*156*] Event publisher not enabled: BPFEventPublisher: Publisher disabled via configuration Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.998440 68093 eventfactory.cpp:*156*] Event publisher not enabled: inotify: Publisher disabled via configuration Feb 14 132032 malik-Latitude-3420 osqueryd[68093]: I0214 132032.998488 68093 syslog.cpp:*173*] Successfully opened pipe for syslog ingestion: /var/osquery/syslog_pipe Feb 14 132035 malik-Latitude-3420 osqueryd[68093]: I0214 132035.246196 68093 events.cpp:*70*] Skipping subscriber: apparmor_events: Subscriber disabled via configuration Feb 14 132044 malik-Latitude-3420 osqueryd[68093]: I0214 132044.006948 68093 eventsubscriberplugin.cpp:*493* Feb 14 132046 malik-Latitude-3420 osqueryd[68093]: I0214 132046.344275 68093 eventsubscriberplugin.cpp:*493*] Found 476 events for subscriber auditeventpublisher.process_events Feb 14 132048 malik-Latitude-3420 osqueryd[68093]: I0214 132048.501849 68093 events.cpp:*70*] Skipping subscriber: process_file_events: Subscriber disabled via configuration