Title
#kolide
a

andybot

03/06/2020, 5:16 PM
has anyone ever seen their osqueryd have high peaks in CPU usage? I’m curious how someone would resolve query execution randomly pegging CPU usage every 10 seconds between when the agent talks to /api/v1/osquery/distributed/read and when it hits /api/v1/osquery/log
zwass

zwass

03/06/2020, 8:15 PM
Do you see anything in the osquery status logs? Could there be a label query that is CPU expensive? Can you see any outliers in
select * from osquery_schedule
?