Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows sometimes hangs #1442

Open
directionless opened this issue Nov 7, 2023 · 0 comments
Open

Windows sometimes hangs #1442

directionless opened this issue Nov 7, 2023 · 0 comments

Comments

@directionless
Copy link
Contributor

More and more I'm seeing occasions where the windows agent hangs.

Symptomatically, I see things like distributed queries hanging, while scheduled ones continue. Inside K2, we sometimes see last seen remain current, but live query stops working. Etc.

I suspect there's a query that hangs, somewhere. Might be osquery, might be launcher. And what we see is the osquery distributed thread hang, but the scheduled one remains. My hunch is that it's somehow WMI related, but I don't have any evidence to back that up.

I wonder if we can:

  • still get a flare, that's a different code path
  • add more debug logs to capture ???
  • detect and remediate?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant