Prateek Kumar Nischal
10/06/2020, 5:45 PM// % of (User + System + Idle) CPU time worker can utilize
// for LATENCY_LIMIT seconds.
{WatchdogLimitType::UTILIZATION_LIMIT, {10, 5, 100}},
// Seconds of tolerable UTILIZATION_LIMIT sustained latency.
{WatchdogLimitType::LATENCY_LIMIT, {12, 6, 1000}},
This utilization limit is cpu time considering a single core right.. and utlization limit 100 means osquery is free to fully utilize a single core for itself.Zach Zeid
10/06/2020, 6:12 PMPrateek Kumar Nischal
10/06/2020, 6:19 PM--watchdog_level VALUE Performance limit level (0=normal, 1=restrictive, -1=off)
3 levels, 3 optionstheopolis
10/06/2020, 6:22 PMZach Zeid
10/06/2020, 6:26 PMPrateek Kumar Nischal
10/06/2020, 6:38 PMZach Zeid
10/06/2020, 6:44 PM200
, restrictive is 100
and off is 10000
?Prateek Kumar Nischal
10/06/2020, 7:10 PMZach Zeid
10/06/2020, 8:07 PMwatchdog
for testing purposes?theopolis
10/06/2020, 8:38 PMZach Zeid
10/06/2020, 8:39 PMwatchdog
isn't triggering like it should be on some machines that I have watchdog enabled on and set to 1
theopolis
10/06/2020, 8:41 PM