zwass
We are seeing this random issue on servers having 4.6 version installed being unresponsive after a while from fleet using live queries. 4.5.1 is working fine without any issues. I went on the server and did a restart of the agent and it started back up but then it went back to being non responsive again. Verbose TLS logging on agent side wont show anything since it was restarted.
aby
02/01/2021, 6:24 PMzwass
--verbose --tls_dump
and then triggering the issue?aby
02/01/2021, 6:26 PMzwass
terracatta
aby
02/01/2021, 6:43 PMCentOS Linux release 7.9.2009 (Core)
terracatta
aby
02/01/2021, 6:46 PMSELECT * FROM osquery_info;
& it starts back up after agent restart. I have enabled verbose logging right now and it's working for far. I will keep on monitoring.theopolis
zwass