https://github.com/osquery/osquery logo
#general
Title
# general
u

8p8c

03/06/2018, 5:29 PM
@Powderman no issues with the users table?
p

Powderman

03/06/2018, 9:53 PM
@8p8c @atom disabling our user_monitoring pack lead to a 10-15% reduction in ldap lookups. did not expect that but i suppose with sudo-ldap integration it makes some sense
u

8p8c

03/07/2018, 4:20 AM
i think it makes sense especially if it's _user_events_ with joins against the users table. i'd be cautious with join statements in any _*_events_ tables.
2 Views