Yes. Osquery runs two processes. One is the watchdog
y
YehonatanShami
06/16/2019, 11:03 AM
Seems like the watchdog is keeping the lock file in the dB open and after restarting the service getting the handle to it fails and the processes are running as dummy
It’s really troubling, I can’t restart the service without changing the dB path or manually killing the watchdog process then start the service