theopolis10/06/2020, 5:09 PM
Prateek Kumar Nischal10/06/2020, 5:38 PM
Zach Zeid10/06/2020, 6:10 PM
theopolis10/06/2020, 6:23 PM
Prateek Kumar Nischal10/07/2020, 10:55 AM
to the service and disable the watchdog. Which could cause the service to potentially exit. if the watchdog is running at any other limit, restrictive or normal, osquery would get respawned due to cgroup view of the cpu usage.
Zach Zeid10/07/2020, 12:40 PM
interacts with the osquery daemon service?
theopolis10/07/2020, 12:46 PM
Zach Zeid10/07/2020, 12:58 PM
Prateek Kumar Nischal10/07/2020, 1:11 PM
you can see watchdog killing osquery.
Oct 06 05:09:23 <hostname> osqueryd: osqueryd worker (17769) stopping: Maximum sustainable CPU utilization limit exceeded: 12
Zach Zeid10/07/2020, 1:12 PM
in the flags file or something?
Prateek Kumar Nischal10/07/2020, 1:13 PM
advance over a 10 minute period..
theopolis10/07/2020, 1:19 PM
Prateek Kumar Nischal10/07/2020, 1:24 PM
Zach Zeid10/07/2020, 4:02 PM
columns in nanoseconds?
is in bytes?
and everything is in seconds?
Prateek Kumar Nischal10/07/2020, 7:56 PM
Zach Zeid10/07/2020, 8:06 PM