Lucas Manuel Rodriguez

Results 100 comments of Lucas Manuel Rodriguez

5.5.1 has https://github.com/osquery/osquery/pull/7675, so Fleet logs should provide us more info about which query is the problematic one.

@roperzh Could you retest with `fleetctl package --type=pkg [...] --osqueryd-channel=edge`? (`osqueryd` in `edge` is 5.5.1)

``` W0708 11:46:23.758304 1800450048 watcher.cpp:397] osqueryd worker (33720) stopping: Memory limits exceeded: 262242304 ``` My guess is `fleet_detail_query_software_macos`, but let's wait for osquery 5.5.1 to tell us which is the...

IMO "simplest"/least-risky solution to try out seems to be (3). (Solution (1) would require some refactor/migration.)

Hi @marcosd4h, thanks for the great analysis. > The failure is attributed to the windows Service Control Manager (SCM), which kills the orbit.exe process after taking more than 30secs to...

Thanks for the analysis (bis), am learning a lot! > there should be no calls to the SCM from osqueryd.exe. What would happen if we implement (1) (https://github.com/fleetdm/fleet/issues/7874), but not...

Hi @eastbook. Most of the times, these `context canceled` errors are due to: 1. Slow MySQL database given the number of hosts (host requests time out before the database operation...

Hi @FreddieOliveira Couple of questions/comments: 1. What MySQL server are you using? 2. Are users authenticated via SSO? 3. Can you check `curl https:///healthz`? (to rule out database issues, we've...

Here are my thoughts on a possible fix for this. Currently, when a host re-enrolls we do the following (conditional) cleanup for the policies of the host: https://github.com/fleetdm/fleet/blob/26f210f3f674509e955a79a94e5210bb32df95dc/server/datastore/mysql/hosts.go#L780-L797 To support...