Table action "generate" is called based on the size of the table records #7197
Open
Description
Bug report
Windows 10 20H2 and 21H1
What version of osquery are you using?
OSQuery 4.9
What steps did you take to reproduce the issue?
Create a extended plugin with virtual table defined. Create a virtual table with primary key defined. Schedule a 5 minutes query for this table (Contains Union and not exists). See lots of callbacks (ExtensionImpl::call) with the registry as "table" and "action" as "generate". Looks these callbacks increase with the table record sizes increase. With the table records size as ~2000, see 11000+ callback in 45 minutes.
What did you expect to see?
As the query is executed every 5 minutes, see only 1 query in 5 minutes.
What did you see instead?
The queries are based on the table records size instead of the query interval.