Skip to content

Table action "generate" is called based on the size of the table records #7197

Open
@christmasliu

Description

Bug report

Windows 10 20H2 and 21H1

What version of osquery are you using?

OSQuery 4.9

What steps did you take to reproduce the issue?

Create a extended plugin with virtual table defined. Create a virtual table with primary key defined. Schedule a 5 minutes query for this table (Contains Union and not exists). See lots of callbacks (ExtensionImpl::call) with the registry as "table" and "action" as "generate". Looks these callbacks increase with the table record sizes increase. With the table records size as ~2000, see 11000+ callback in 45 minutes.

What did you expect to see?

As the query is executed every 5 minutes, see only 1 query in 5 minutes.

What did you see instead?

The queries are based on the table records size instead of the query interval.

Metadata

Assignees

No one assigned

    Labels

    SQLextensionsRelated to osquery extension SDK or to extensions themselvesperformancetriageIssue needs to be verified, reproduced and prioritized

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions