Zach Zeid
11/03/2021, 8:12 PMosqueryd: osqueryd worker (10022) stopping: Maximum sustainable CPU utilization limit exceeded: 12
it looks like osquery just diffs user_time and system_time to get that info, but my question is the 12
is that a time, like seconds, or milliseconds? if so, what is the metric?Stefano Bonicatti
11/03/2021, 8:36 PMZach Zeid
11/03/2021, 8:38 PMStefano Bonicatti
11/03/2021, 8:55 PMwatchdog_utilization_limit
flag, it increases an internal counter, or resets it if the CPU usage is below the limit.
That counter is then used to calculate that final number you see, using the configured check interval.Zach Zeid
11/03/2021, 8:56 PM