Zach Zeid11/03/2021, 8:12 PM
it looks like osquery just diffs user_time and system_time to get that info, but my question is the
osqueryd: osqueryd worker (10022) stopping: Maximum sustainable CPU utilization limit exceeded: 12
is that a time, like seconds, or milliseconds? if so, what is the metric?
Stefano Bonicatti11/03/2021, 8:36 PM
Zach Zeid11/03/2021, 8:38 PM
Stefano Bonicatti11/03/2021, 8:55 PM
flag, it increases an internal counter, or resets it if the CPU usage is below the limit. That counter is then used to calculate that final number you see, using the configured check interval.
Zach Zeid11/03/2021, 8:56 PM