Hello, I have CPU 100% osqueryd issue within ~5% o...
# general
Hello, I have CPU 100% osqueryd issue within ~5% of my linux servers. I see messages like “osqueryd worker (31531) stopping: Maximum sustainable CPU utilization limit exceeded: 12” every ~15 seconds and distributed query not working. I try to add “watchdog_memory_limit: 550", “watchdog_utilization_limit: 720”, “watchdog_delay: 480" and even “disable_watchdog: true” parameter, but nothing changed. How can I fix the issue?
systemctl set-property osqueryd.service CPUQuota=5%
solve the issue (tried only on one host). But I want to fix the issue on osquery side. Also there are some opened issue without solution like https://github.com/osquery/osquery/issues/5234.
metal 1
I saw similar when the local database was corrupted. Stopping the service, deleting the local
, and restarting the service resolved the issue
@Konstantin i'm guessing you have auditing and/or file events enabled?