You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
More and more I'm seeing occasions where the windows agent hangs.
Symptomatically, I see things like distributed queries hanging, while scheduled ones continue. Inside K2, we sometimes see last seen remain current, but live query stops working. Etc.
I suspect there's a query that hangs, somewhere. Might be osquery, might be launcher. And what we see is the osquery distributed thread hang, but the scheduled one remains. My hunch is that it's somehow WMI related, but I don't have any evidence to back that up.
I wonder if we can:
still get a flare, that's a different code path
add more debug logs to capture ???
detect and remediate?
The text was updated successfully, but these errors were encountered:
More and more I'm seeing occasions where the windows agent hangs.
Symptomatically, I see things like distributed queries hanging, while scheduled ones continue. Inside K2, we sometimes see last seen remain current, but live query stops working. Etc.
I suspect there's a query that hangs, somewhere. Might be osquery, might be launcher. And what we see is the osquery distributed thread hang, but the scheduled one remains. My hunch is that it's somehow WMI related, but I don't have any evidence to back that up.
I wonder if we can:
The text was updated successfully, but these errors were encountered: