Jean M

04/09/2021, 12:53 PM
Hi, I’ve a query pack with several differential queries configured, at first run it will send the initial rows as “added” but at some point it hits the CPU limits “Maximum sustainable CPU utilization limit exceeded: 15" and kills the worker, after this it will continue executing the scheduled queries (as can be seen in osquery_scheduled/last_executed) but it will not send the results to the remote log 🤔 any idea why? I think it only works after I restart osqueryd
1:13 PM
well after more careful analysis I don’t think the error message and the not sending of logs are related. checking better…