Channels
#general
Title
# general
f
fritz
10/16/2018, 7:26 PMAnyone have insight into why the last table is so slow to return results (even when there are less than a hundred rows).
Copy code
osquery> select COUNT (*) from last;
+-----------+
| COUNT (*) |
+-----------+
| 65 |
+-----------+s
spookerlabs
10/16/2018, 11:02 PMNo ideia but try timer stuff
Copy code
osquery> .timer yes
osquery> select count(*) from last ;
+----------+
| count(*) |
+----------+
| 154 |
+----------+
Run Time: real 0.001 user 0.001247 sys 0.000024
osquery>here pretty fast
Copy code
osquery> .version
osquery 3.3.0
using SQLite 3.19.3
osquery>8 Views