![osquery watchdog osquery watchdog](https://www.loginsoft.com/wp-content/uploads/2020/06/select-DISTINCT-processes.png)
However, this is done without consideration of what’s running at the time. -watchdog_utilization_limit=0 同 watchdog_memory_limit. osquery’s watchdog feature does prevent some performance issues by killing any processes that consume too much CPU or memory.Orbit encourages use of the osquery performance Watchdog, while Launcher disables the Watchdog. Launcher utilizes a custom gRPC API that has led to issues with character encoding, load balancers/proxies, and request size limits.
![osquery watchdog osquery watchdog](https://files.speakerdeck.com/presentations/9563c08cbeab409a88df024793c31af8/slide_41.jpg)
Live Discover is based on osquery, an open-source project that allows administrators to understand. Orbit prefers the built-in osquery remote APIs. It allows direct access to a device to understand its current running status and historic activity. -disable_watchdog=false ,默认值是 false ,表示osquery是默认开启资源监控的。如果发现超过了阈值,则会重启worker进程 Live Discover allows administrators to gain visibility into their environment and get immediate answers to any pressing question.Root 28232 1 0 16:17 ? 00:00:00 /usr/bin/osqueryd -flagfile /etc/osquery/osquery.flags -config_path /etc/osquery/nf