https://github.com/osquery/osquery logo
Title
g

groob

06/16/2019, 10:41 AM
Yes. Osquery runs two processes. One is the watchdog
y

YehonatanShami

06/16/2019, 11:03 AM
Seems like the watchdog is keeping the lock file in the dB open and after restarting the service getting the handle to it fails and the processes are running as dummy
It’s really troubling, I can’t restart the service without changing the dB path or manually killing the watchdog process then start the service
g

groob

06/16/2019, 12:13 PM
What osquery version
y

YehonatanShami

06/16/2019, 12:29 PM
3.3.2