Title
#general
f

fritz

10/16/2018, 7:26 PM
Anyone have insight into why the last table is so slow to return results (even when there are less than a hundred rows).
osquery> select COUNT (*) from last;
+-----------+
| COUNT (*) |
+-----------+
| 65        |
+-----------+
spookerlabs

spookerlabs

10/16/2018, 11:02 PM
No ideia but try timer stuff
11:02 PM
osquery> .timer yes
osquery> select count(*) from last ;
+----------+
| count(*) |
+----------+
| 154      |
+----------+
Run Time: real 0.001 user 0.001247 sys 0.000024
osquery>
11:03 PM
here pretty fast
11:03 PM
osquery> .version
osquery 3.3.0
using SQLite 3.19.3
osquery>