Title
#general
s

shed7

01/07/2019, 10:58 AM
Hello, I've got a bunch of osqueryd running at 100% CPU, what can I do to find out why?
1:49 PM
I tried the steps given by clong in this issue: https://github.com/facebook/osquery/issues/5234, but the resulting numbers didn't indicate any overflow of events or anything, nor was there any messages such as
(overflowed limit 5000)
. restarted the service and they all settled down
1:49 PM
weird
j

julient

01/10/2019, 10:46 AM
if linux, did you try to enforce cgroups?
s

shed7

01/10/2019, 12:27 PM
no I haven't done that yet, any docs that would explain that approach you would recommend?