Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Title
g
groob
06/16/2019, 10:41 AMYes. Osquery runs two processes. One is the watchdog
y
YehonatanShami
06/16/2019, 11:03 AMSeems like the watchdog is keeping the lock file in the dB open and after restarting the service getting the handle to it fails and the processes are running as dummy
It’s really troubling, I can’t restart the service without changing the dB path or manually killing the watchdog process then start the service
g
groob
06/16/2019, 12:13 PMWhat osquery version
y
YehonatanShami
06/16/2019, 12:29 PM3.3.2