launcher icon indicating copy to clipboard operation
launcher copied to clipboard

Potential hang when querying windows_eventlog

Open directionless opened this issue 5 years ago • 1 comments

From a conversation on slack, running something like select * from windows_eventlog where channel = "Security"; seem to leave launcher locked and unresponsive to future queries.

I have not dug into why. My guess is that it's trying to marshal a bunch of data and hitting some kind of resource limit

directionless avatar Oct 21 '20 14:10 directionless

Watching the task manager, I see osquery spike, and then recede, but then launcher starts growing ram.

directionless avatar Oct 21 '20 15:10 directionless