Hi everyone,
We have Sophos Intercept X with EDR installed on severals Windows Server 2016 and 2019. Every now and then, we can see this kind of disk activity :
The disk activity is almost maxed out and disk latency become bad (this is probably related to our architecture).
I get that it's simply sqlite method of doing a transaction, but is there anything we can do to improve this behavior ?
Products versions :
I 2021-05-16T00:02:18.405Z Database size: 54816768 bytes I 2021-05-16T00:02:20.512Z Resuming trickle feed processing I 2021-05-16T00:03:09.146Z Successfully finished processing 1381 events (279 to be included in trickle feed) I 2021-05-16T00:08:09.378Z Database size: 54816768 bytes I 2021-05-16T00:08:10.568Z Resuming trickle feed processing I 2021-05-16T00:11:42.300Z Successfully finished processing 3421 events (303 to be included in trickle feed) I 2021-05-16T00:16:36.199Z Database size: 54874112 bytes I 2021-05-16T00:16:41.314Z Resuming trickle feed processing I 2021-05-16T00:17:48.345Z Successfully finished processing 5886 events (453 to be included in trickle feed) I 2021-05-16T00:22:40.757Z Database size: 54874112 bytes I 2021-05-16T00:22:40.804Z Resuming trickle feed processing I 2021-05-16T00:23:05.003Z Successfully finished processing 1890 events (326 to be included in trickle feed) I 2021-05-16T00:28:35.868Z Database size: 54878208 bytes I 2021-05-16T00:28:35.900Z Resuming trickle feed processing I 2021-05-16T00:30:18.652Z Successfully finished processing 1461 events (304 to be included in trickle feed) I 2021-05-16T00:36:07.417Z Database size: 54878208 bytes I 2021-05-16T00:36:07.464Z Resuming trickle feed processing I 2021-05-16T00:38:52.142Z Successfully finished processing 3054 events (409 to be included in trickle feed) I 2021-05-16T00:44:07.080Z Database size: 54878208 bytes I 2021-05-16T00:44:07.424Z Resuming trickle feed processing I 2021-05-16T00:45:28.523Z Successfully finished processing 2053 events (423 to be included in trickle feed) I 2021-05-16T00:50:37.885Z Database size: 54878208 bytes I 2021-05-16T00:50:38.010Z Resuming trickle feed processing I 2021-05-16T00:51:24.309Z Successfully finished processing 1226 events (333 to be included in trickle feed) I 2021-05-16T00:58:12.699Z Database size: 54878208 bytes I 2021-05-16T00:58:15.310Z Resuming trickle feed processing I 2021-05-16T01:06:34.351Z Successfully finished processing 1353 events (417 to be included in trickle feed) I 2021-05-16T01:12:19.158Z Database size: 54878208 bytes I 2021-05-16T01:12:19.204Z Resuming trickle feed processing I 2021-05-16T01:12:32.051Z Successfully finished processing 2833 events (734 to be included in trickle feed) I 2021-05-16T01:17:59.245Z Database size: 54878208 bytes I 2021-05-16T01:17:59.292Z Resuming trickle feed processing I 2021-05-16T01:18:21.677Z Successfully finished processing 2000 events (315 to be included in trickle feed) I 2021-05-16T01:24:00.105Z Database size: 54878208 bytes I 2021-05-16T01:24:00.137Z Resuming trickle feed processing I 2021-05-16T01:24:13.462Z Successfully finished processing 1167 events (312 to be included in trickle feed) I 2021-05-16T01:29:50.982Z Database size: 54878208 bytes I 2021-05-16T01:29:51.014Z Resuming trickle feed processing I 2021-05-16T01:30:11.892Z Successfully finished processing 1624 events (312 to be included in trickle feed) I 2021-05-16T01:35:49.532Z Database size: 54878208 bytes I 2021-05-16T01:35:49.563Z Resuming trickle feed processing I 2021-05-16T01:35:57.133Z Successfully finished processing 811 events (307 to be included in trickle feed) I 2021-05-16T01:40:41.582Z Database size: 54874112 bytes I 2021-05-16T01:40:41.631Z Resuming trickle feed processing I 2021-05-16T01:40:51.799Z Successfully finished processing 895 events (272 to be included in trickle feed) I 2021-05-16T01:46:25.327Z Database size: 54874112 bytes I 2021-05-16T01:46:25.358Z Resuming trickle feed processing I 2021-05-16T01:46:35.381Z Successfully finished processing 1283 events (296 to be included in trickle feed) I 2021-05-16T01:52:13.162Z Database size: 54874112 bytes I 2021-05-16T01:52:13.193Z Resuming trickle feed processing I 2021-05-16T01:52:22.035Z Successfully finished processing 1092 events (310 to be included in trickle feed) I 2021-05-16T01:57:17.243Z Database size: 54874112 bytes I 2021-05-16T01:57:17.274Z Resuming trickle feed processing I 2021-05-16T01:57:29.385Z Successfully finished processing 795 events (272 to be included in trickle feed) I 2021-05-16T02:02:36.100Z Database size: 54878208 bytes I 2021-05-16T02:02:36.131Z Resuming trickle feed processing I 2021-05-16T02:02:49.430Z Successfully finished processing 1360 events (293 to be included in trickle feed) I 2021-05-16T02:08:16.580Z Database size: 54878208 bytes I 2021-05-16T02:08:16.612Z Resuming trickle feed processing I 2021-05-16T02:08:26.484Z Successfully finished processing 843 events (297 to be included in trickle feed) I 2021-05-16T02:13:10.018Z Database size: 54874112 bytes I 2021-05-16T02:13:10.049Z Resuming trickle feed processing I 2021-05-16T02:13:26.534Z Successfully finished processing 790 events (253 to be included in trickle feed) I 2021-05-16T02:18:29.923Z Database size: 54874112 bytes I 2021-05-16T02:18:29.954Z Resuming trickle feed processing I 2021-05-16T02:18:44.222Z Successfully finished processing 1439 events (290 to be included in trickle feed) I 2021-05-16T02:24:19.818Z Database size: 54874112 bytes I 2021-05-16T02:24:19.849Z Resuming trickle feed processing I 2021-05-16T02:24:32.786Z Successfully finished processing 916 events (305 to be included in trickle feed) I 2021-05-16T02:29:23.986Z Database size: 54874112 bytes I 2021-05-16T02:29:24.017Z Resuming trickle feed processing I 2021-05-16T02:29:33.320Z Successfully finished processing 1166 events (269 to be included in trickle feed) I 2021-05-16T02:34:37.070Z Database size: 54874112 bytes I 2021-05-16T02:34:37.101Z Resuming trickle feed processing I 2021-05-16T02:34:49.844Z Successfully finished processing 802 events (269 to be included in trickle feed) I 2021-05-16T02:39:32.316Z Database size: 54874112 bytes I 2021-05-16T02:39:32.347Z Resuming trickle feed processing I 2021-05-16T02:39:45.543Z Successfully finished processing 949 events (284 to be included in trickle feed) I 2021-05-16T02:45:18.110Z Database size: 54878208 bytes I 2021-05-16T02:45:18.141Z Resuming trickle feed processing I 2021-05-16T02:45:29.372Z Successfully finished processing 1331 events (297 to be included in trickle feed) I 2021-05-16T02:51:07.552Z Database size: 54874112 bytes I 2021-05-16T02:51:07.583Z Resuming trickle feed processing I 2021-05-16T02:51:18.739Z Successfully finished processing 1052 events (304 to be included in trickle feed) I 2021-05-16T02:56:51.575Z Database size: 54874112 bytes I 2021-05-16T02:56:51.622Z Resuming trickle feed processing I 2021-05-16T02:57:03.171Z Successfully finished processing 995 events (311 to be included in trickle feed) I 2021-05-16T03:02:13.465Z Database size: 54874112 bytes I 2021-05-16T03:02:13.496Z Resuming trickle feed processing I 2021-05-16T03:02:24.568Z Successfully finished processing 1231 events (284 to be included in trickle feed) I 2021-05-16T03:07:22.754Z Database size: 54874112 bytes I 2021-05-16T03:07:22.786Z Resuming trickle feed processing I 2021-05-16T03:07:35.106Z Successfully finished processing 800 events (269 to be included in trickle feed) I 2021-05-16T03:12:59.431Z Database size: 54874112 bytes I 2021-05-16T03:12:59.463Z Resuming trickle feed processing I 2021-05-16T03:13:21.440Z Successfully finished processing 1408 events (291 to be included in trickle feed) I 2021-05-16T03:18:42.869Z Database size: 54882304 bytes I 2021-05-16T03:18:42.900Z Resuming trickle feed processing I 2021-05-16T03:19:00.067Z Successfully finished processing 1513 events (317 to be included in trickle feed) I 2021-05-16T03:23:41.083Z Database size: 54882304 bytes I 2021-05-16T03:23:41.130Z Resuming trickle feed processing I 2021-05-16T03:23:52.043Z Successfully finished processing 810 events (260 to be included in trickle feed) I 2021-05-16T03:29:01.925Z Database size: 54882304 bytes I 2021-05-16T03:29:01.956Z Resuming trickle feed processing I 2021-05-16T03:29:12.132Z Successfully finished processing 1409 events (286 to be included in trickle feed) I 2021-05-16T03:34:49.897Z Database size: 54878208 bytes I 2021-05-16T03:34:49.928Z Resuming trickle feed processing I 2021-05-16T03:35:01.631Z Successfully finished processing 989 events (299 to be included in trickle feed) I 2021-05-16T03:40:04.795Z Database size: 54878208 bytes I 2021-05-16T03:40:04.827Z Resuming trickle feed processing I 2021-05-16T03:40:13.554Z Successfully finished processing 763 events (295 to be included in trickle feed) I 2021-05-16T03:45:26.223Z Database size: 54878208 bytes I 2021-05-16T03:45:26.254Z Resuming trickle feed processing I 2021-05-16T03:45:37.077Z Successfully finished processing 1254 events (273 to be included in trickle feed) I 2021-05-16T03:51:12.484Z Database size: 54878208 bytes I 2021-05-16T03:51:12.516Z Resuming trickle feed processing I 2021-05-16T03:51:24.796Z Successfully finished processing 984 events (301 to be included in trickle feed) I 2021-05-16T03:56:51.368Z Database size: 54882304 bytes I 2021-05-16T03:56:51.399Z Resuming trickle feed processing I 2021-05-16T03:57:05.654Z Successfully finished processing 980 events (308 to be included in trickle feed) I 2021-05-16T04:02:23.499Z Database size: 54882304 bytes I 2021-05-16T04:02:23.531Z Resuming trickle feed processing I 2021-05-16T04:02:35.611Z Successfully finished processing 1373 events (302 to be included in trickle feed) I 2021-05-16T04:07:28.907Z Database size: 54878208 bytes I 2021-05-16T04:07:28.938Z Resuming trickle feed processing I 2021-05-16T04:07:38.237Z Successfully finished processing 728 events (255 to be included in trickle feed) I 2021-05-16T04:12:43.819Z Database size: 54878208 bytes I 2021-05-16T04:12:43.850Z Resuming trickle feed processing I 2021-05-16T04:12:59.264Z Successfully finished processing 825 events (272 to be included in trickle feed) I 2021-05-16T04:17:42.488Z Database size: 54874112 bytes I 2021-05-16T04:17:42.519Z Resuming trickle feed processing I 2021-05-16T04:17:54.609Z Successfully finished processing 1359 events (278 to be included in trickle feed) I 2021-05-16T04:22:38.786Z Database size: 54874112 bytes I 2021-05-16T04:22:38.817Z Resuming trickle feed processing I 2021-05-16T04:22:50.094Z Successfully finished processing 980 events (270 to be included in trickle feed) I 2021-05-16T04:27:36.403Z Database size: 54878208 bytes I 2021-05-16T04:27:36.434Z Resuming trickle feed processing I 2021-05-16T04:27:46.234Z Successfully finished processing 730 events (253 to be included in trickle feed) I 2021-05-16T04:32:54.921Z Database size: 54874112 bytes I 2021-05-16T04:32:54.952Z Resuming trickle feed processing I 2021-05-16T04:33:02.985Z Successfully finished processing 1182 events (273 to be included in trickle feed) I 2021-05-16T04:38:28.695Z Database size: 54874112 bytes I 2021-05-16T04:38:28.727Z Resuming trickle feed processing I 2021-05-16T04:38:41.569Z Successfully finished processing 1075 events (307 to be included in trickle feed) I 2021-05-16T04:44:17.797Z Database size: 54878208 bytes I 2021-05-16T04:44:17.828Z Resuming trickle feed processing I 2021-05-16T04:44:30.364Z Successfully finished processing 1359 events (308 to be included in trickle feed) I 2021-05-16T04:49:18.825Z Database size: 54878208 bytes I 2021-05-16T04:49:18.857Z Resuming trickle feed processing I 2021-05-16T04:49:28.447Z Successfully finished processing 740 events (263 to be included in trickle feed) I 2021-05-16T04:54:59.213Z Database size: 54874112 bytes I 2021-05-16T04:54:59.244Z Resuming trickle feed processing I 2021-05-16T04:55:11.376Z Successfully finished processing 874 events (297 to be included in trickle feed) I 2021-05-16T05:00:29.451Z Database size: 54874112 bytes I 2021-05-16T05:00:29.482Z Resuming trickle feed processing I 2021-05-16T05:00:53.289Z Successfully finished processing 1798 events (301 to be included in trickle feed) I 2021-05-16T05:06:01.206Z Database size: 54874112 bytes I 2021-05-16T05:06:01.238Z Resuming trickle feed processing I 2021-05-16T05:06:13.849Z Successfully finished processing 867 events (292 to be included in trickle feed) I 2021-05-16T05:11:44.956Z Database size: 54874112 bytes I 2021-05-16T05:11:44.987Z Resuming trickle feed processing I 2021-05-16T05:11:58.144Z Successfully finished processing 1154 events (300 to be included in trickle feed) I 2021-05-16T05:17:35.857Z Database size: 54878208 bytes I 2021-05-16T05:17:35.889Z Resuming trickle feed processing I 2021-05-16T05:18:04.405Z Successfully finished processing 3379 events (315 to be included in trickle feed) I 2021-05-16T05:23:34.197Z Database size: 54874112 bytes I 2021-05-16T05:23:34.228Z Resuming trickle feed processing I 2021-05-16T05:23:47.014Z Successfully finished processing 972 events (316 to be included in trickle feed) I 2021-05-16T05:29:16.483Z Database size: 54878208 bytes I 2021-05-16T05:29:16.514Z Resuming trickle feed processing I 2021-05-16T05:29:25.741Z Successfully finished processing 1269 events (294 to be included in trickle feed) I 2021-05-16T05:34:52.286Z Database size: 54874112 bytes I 2021-05-16T05:34:52.318Z Resuming trickle feed processing I 2021-05-16T05:35:05.963Z Successfully finished processing 1011 events (293 to be included in trickle feed) I 2021-05-16T05:40:41.430Z Database size: 54874112 bytes I 2021-05-16T05:40:41.461Z Resuming trickle feed processing I 2021-05-16T05:40:51.185Z Successfully finished processing 943 events (322 to be included in trickle feed) I 2021-05-16T05:46:15.988Z Database size: 54874112 bytes I 2021-05-16T05:46:16.019Z Resuming trickle feed processing I 2021-05-16T05:46:25.390Z Successfully finished processing 1257 events (293 to be included in trickle feed) I 2021-05-16T05:51:49.624Z Database size: 54874112 bytes I 2021-05-16T05:51:49.671Z Resuming trickle feed processing I 2021-05-16T05:52:04.725Z Successfully finished processing 852 events (292 to be included in trickle feed) I 2021-05-16T05:57:38.727Z Database size: 54874112 bytes I 2021-05-16T05:57:38.758Z Resuming trickle feed processing I 2021-05-16T05:58:02.860Z Successfully finished processing 1734 events (314 to be included in trickle feed) I 2021-05-16T06:03:21.819Z Database size: 54878208 bytes I 2021-05-16T06:03:21.850Z Resuming trickle feed processing I 2021-05-16T06:03:33.447Z Successfully finished processing 1482 events (305 to be included in trickle feed) I 2021-05-16T06:08:18.658Z Database size: 54874112 bytes I 2021-05-16T06:08:18.690Z Resuming trickle feed processing I 2021-05-16T06:08:27.387Z Successfully finished processing 682 events (254 to be included in trickle feed) I 2021-05-16T06:13:31.443Z Database size: 54874112 bytes I 2021-05-16T06:13:31.978Z Resuming trickle feed processing I 2021-05-16T06:13:51.749Z Successfully finished processing 1569 events (271 to be included in trickle feed) I 2021-05-16T06:19:09.353Z Database size: 54878208 bytes I 2021-05-16T06:19:09.384Z Resuming trickle feed processing I 2021-05-16T06:19:19.809Z Successfully finished processing 894 events (309 to be included in trickle feed) I 2021-05-16T06:24:06.705Z Database size: 54878208 bytes I 2021-05-16T06:24:06.736Z Resuming trickle feed processing I 2021-05-16T06:24:14.547Z Successfully finished processing 747 events (268 to be included in trickle feed) I 2021-05-16T06:29:10.815Z Database size: 54874112 bytes I 2021-05-16T06:29:10.846Z Resuming trickle feed processing I 2021-05-16T06:29:23.329Z Successfully finished processing 1219 events (256 to be included in trickle feed) I 2021-05-16T06:34:08.599Z Database size: 54878208 bytes I 2021-05-16T06:34:08.630Z Resuming trickle feed processing I 2021-05-16T06:34:23.520Z Successfully finished processing 912 events (265 to be included in trickle feed) I 2021-05-16T06:40:03.121Z Database size: 54878208 bytes I 2021-05-16T06:40:03.152Z Resuming trickle feed processing I 2021-05-16T06:40:12.559Z Successfully finished processing 901 events (323 to be included in trickle feed) I 2021-05-16T06:44:54.477Z Database size: 54874112 bytes I 2021-05-16T06:44:54.510Z Resuming trickle feed processing I 2021-05-16T06:45:06.056Z Successfully finished processing 1183 events (258 to be included in trickle feed) I 2021-05-16T06:49:58.007Z Database size: 54874112 bytes I 2021-05-16T06:49:58.039Z Resuming trickle feed processing I 2021-05-16T06:50:09.368Z Successfully finished processing 916 events (254 to be included in trickle feed) I 2021-05-16T06:55:36.854Z Database size: 54874112 bytes I 2021-05-16T06:55:36.885Z Resuming trickle feed processing I 2021-05-16T06:55:47.214Z Successfully finished processing 814 events (297 to be included in trickle feed) I 2021-05-16T07:00:53.976Z Database size: 54874112 bytes I 2021-05-16T07:00:54.007Z Resuming trickle feed processing I 2021-05-16T07:01:04.671Z Successfully finished processing 1334 events (297 to be included in trickle feed) I 2021-05-16T07:05:52.382Z Database size: 54874112 bytes I 2021-05-16T07:05:52.413Z Resuming trickle feed processing I 2021-05-16T07:06:03.652Z Successfully finished processing 940 events (264 to be included in trickle feed) I 2021-05-16T07:10:59.281Z Database size: 54878208 bytes I 2021-05-16T07:10:59.313Z Resuming trickle feed processing I 2021-05-16T07:11:13.836Z Successfully finished processing 888 events (268 to be included in trickle feed) I 2021-05-16T07:16:42.732Z Database size: 54878208 bytes I 2021-05-16T07:16:42.811Z Resuming trickle feed processing I 2021-05-16T07:17:03.624Z Successfully finished processing 1500 events (311 to be included in trickle feed) I 2021-05-16T07:22:20.123Z Database size: 54874112 bytes I 2021-05-16T07:22:20.155Z Resuming trickle feed processing I 2021-05-16T07:22:40.109Z Successfully finished processing 1057 events (294 to be included in trickle feed) I 2021-05-16T07:27:28.443Z Database size: 54878208 bytes I 2021-05-16T07:27:28.475Z Resuming trickle feed processing I 2021-05-16T07:27:42.887Z Successfully finished processing 863 events (270 to be included in trickle feed) I 2021-05-16T07:32:40.091Z Database size: 54874112 bytes I 2021-05-16T07:32:40.122Z Resuming trickle feed processing I 2021-05-16T07:32:54.534Z Successfully finished processing 1395 events (270 to be included in trickle feed) I 2021-05-16T07:37:58.995Z Database size: 54874112 bytes I 2021-05-16T07:37:59.026Z Resuming trickle feed processing I 2021-05-16T07:38:07.608Z Successfully finished processing 766 events (290 to be included in trickle feed) I 2021-05-16T07:43:18.316Z Database size: 54874112 bytes I 2021-05-16T07:43:18.347Z Resuming trickle feed processing I 2021-05-16T07:43:27.055Z Successfully finished processing 801 events (292 to be included in trickle feed) I 2021-05-16T07:48:20.881Z Database size: 54874112 bytes I 2021-05-16T07:48:20.912Z Resuming trickle feed processing I 2021-05-16T07:48:34.818Z Successfully finished processing 1240 events (258 to be included in trickle feed) I 2021-05-16T07:53:50.224Z Database size: 54874112 bytes I 2021-05-16T07:53:50.255Z Resuming trickle feed processing I 2021-05-16T07:54:04.742Z Successfully finished processing 1258 events (288 to be included in trickle feed) I 2021-05-16T07:58:54.434Z Database size: 54878208 bytes I 2021-05-16T07:58:54.465Z Resuming trickle feed processing I 2021-05-16T07:59:02.096Z Successfully finished processing 1189 events (283 to be included in trickle feed) I 2021-05-16T08:04:27.419Z Database size: 54874112 bytes I 2021-05-16T08:04:27.451Z Resuming trickle feed processing I 2021-05-16T08:04:36.084Z Successfully finished processing 763 events (287 to be included in trickle feed) I 2021-05-16T08:09:57.797Z Database size: 54874112 bytes I 2021-05-16T08:09:57.829Z Resuming trickle feed processing I 2021-05-16T08:10:11.117Z Successfully finished processing 977 events (293 to be included in trickle feed) I 2021-05-16T08:15:05.510Z Database size: 54874112 bytes I 2021-05-16T08:15:05.542Z Resuming trickle feed processing I 2021-05-16T08:15:25.059Z Successfully finished processing 1359 events (271 to be included in trickle feed) I 2021-05-16T08:20:51.954Z Database size: 54878208 bytes I 2021-05-16T08:20:51.986Z Resuming trickle feed processing I 2021-05-16T08:20:59.683Z Successfully finished processing 851 events (320 to be included in trickle feed) I 2021-05-16T08:25:55.148Z Database size: 54874112 bytes I 2021-05-16T08:25:55.179Z Resuming trickle feed processing I 2021-05-16T08:26:06.564Z Successfully finished processing 776 events (265 to be included in trickle feed) I 2021-05-16T08:31:02.378Z Database size: 54874112 bytes I 2021-05-16T08:31:02.409Z Resuming trickle feed processing I 2021-05-16T08:31:15.436Z Successfully finished processing 1441 events (259 to be included in trickle feed) I 2021-05-16T08:36:37.202Z Database size: 54878208 bytes I 2021-05-16T08:36:37.233Z Resuming trickle feed processing I 2021-05-16T08:36:48.141Z Successfully finished processing 1052 events (310 to be included in trickle feed) I 2021-05-16T08:42:22.626Z Database size: 54874112 bytes I 2021-05-16T08:42:22.657Z Resuming trickle feed processing I 2021-05-16T08:42:33.078Z Successfully finished processing 809 events (306 to be included in trickle feed) I 2021-05-16T08:47:30.972Z Database size: 54874112 bytes I 2021-05-16T08:47:31.004Z Resuming trickle feed processing I 2021-05-16T08:47:45.040Z Successfully finished processing 1269 events (271 to be included in trickle feed) I 2021-05-16T08:52:50.445Z Database size: 54874112 bytes I 2021-05-16T08:52:50.476Z Resuming trickle feed processing I 2021-05-16T08:53:03.424Z Successfully finished processing 900 events (274 to be included in trickle feed) I 2021-05-16T08:57:41.690Z Database size: 54874112 bytes I 2021-05-16T08:57:41.721Z Resuming trickle feed processing I 2021-05-16T08:57:51.641Z Successfully finished processing 711 events (272 to be included in trickle feed) I 2021-05-16T09:03:13.259Z Database size: 54874112 bytes I 2021-05-16T09:03:13.290Z Resuming trickle feed processing I 2021-05-16T09:03:23.295Z Successfully finished processing 1246 events (290 to be included in trickle feed) I 2021-05-16T09:08:38.099Z Database size: 54874112 bytes I 2021-05-16T09:08:38.130Z Resuming trickle feed processing I 2021-05-16T09:08:49.794Z Successfully finished processing 952 events (286 to be included in trickle feed) I 2021-05-16T09:13:46.477Z Database size: 54874112 bytes I 2021-05-16T09:13:46.508Z Resuming trickle feed processing I 2021-05-16T09:14:06.190Z Successfully finished processing 1405 events (259 to be included in trickle feed) I 2021-05-16T09:19:22.009Z Database size: 54874112 bytes I 2021-05-16T09:19:22.040Z Resuming trickle feed processing I 2021-05-16T09:19:31.894Z Successfully finished processing 856 events (311 to be included in trickle feed) I 2021-05-16T09:24:39.498Z Database size: 54878208 bytes I 2021-05-16T09:24:39.530Z Resuming trickle feed processing I 2021-05-16T09:24:52.438Z Successfully finished processing 893 events (276 to be included in trickle feed) I 2021-05-16T09:30:27.931Z Database size: 54878208 bytes I 2021-05-16T09:30:27.961Z Resuming trickle feed processing I 2021-05-16T09:30:40.671Z Successfully finished processing 1525 events (301 to be included in trickle feed) I 2021-05-16T09:36:14.731Z Database size: 54878208 bytes I 2021-05-16T09:36:14.759Z Resuming trickle feed processing I 2021-05-16T09:36:23.438Z Successfully finished processing 818 events (315 to be included in trickle feed) I 2021-05-16T09:41:24.009Z Database size: 54874112 bytes I 2021-05-16T09:41:24.040Z Resuming trickle feed processing I 2021-05-16T09:41:33.472Z Successfully finished processing 940 events (277 to be included in trickle feed) I 2021-05-16T09:47:11.095Z Database size: 54874112 bytes I 2021-05-16T09:47:11.126Z Resuming trickle feed processing I 2021-05-16T09:47:23.754Z Successfully finished processing 1621 events (299 to be included in trickle feed) I 2021-05-16T09:52:51.349Z Database size: 54878208 bytes I 2021-05-16T09:52:51.380Z Resuming trickle feed processing I 2021-05-16T09:53:01.545Z Successfully finished processing 864 events (298 to be included in trickle feed) I 2021-05-16T09:58:04.414Z Database size: 54874112 bytes I 2021-05-16T09:58:04.445Z Resuming trickle feed processing I 2021-05-16T09:58:12.384Z Successfully finished processing 731 events (286 to be included in trickle feed) I 2021-05-16T10:03:29.603Z Database size: 54874112 bytes I 2021-05-16T10:03:29.635Z Resuming trickle feed processing I 2021-05-16T10:03:42.287Z Successfully finished processing 1339 events (295 to be included in trickle feed) I 2021-05-16T10:09:12.917Z Database size: 54878208 bytes I 2021-05-16T10:09:12.948Z Resuming trickle feed processing I 2021-05-16T10:09:30.335Z Successfully finished processing 1043 events (299 to be included in trickle feed) I 2021-05-16T10:14:12.298Z Database size: 54878208 bytes I 2021-05-16T10:14:12.327Z Resuming trickle feed processing I 2021-05-16T10:14:30.436Z Successfully finished processing 1269 events (255 to be included in trickle feed) I 2021-05-16T10:19:28.597Z Database size: 54874112 bytes I 2021-05-16T10:19:28.628Z Resuming trickle feed processing I 2021-05-16T10:19:38.479Z Successfully finished processing 782 events (288 to be included in trickle feed) I 2021-05-16T10:25:11.751Z Database size: 54874112 bytes I 2021-05-16T10:25:11.783Z Resuming trickle feed processing I 2021-05-16T10:25:34.747Z Successfully finished processing 1540 events (304 to be included in trickle feed) I 2021-05-16T10:30:41.591Z Database size: 54874112 bytes I 2021-05-16T10:30:41.623Z Resuming trickle feed processing I 2021-05-16T10:30:55.110Z Successfully finished processing 1531 events (288 to be included in trickle feed) I 2021-05-16T10:36:14.660Z Database size: 54878208 bytes I 2021-05-16T10:36:14.691Z Resuming trickle feed processing I 2021-05-16T10:36:26.827Z Successfully finished processing 910 events (295 to be included in trickle feed) I 2021-05-16T10:41:18.993Z Database size: 54874112 bytes I 2021-05-16T10:41:19.024Z Resuming trickle feed processing I 2021-05-16T10:41:28.788Z Successfully finished processing 745 events (275 to be included in trickle feed) I 2021-05-16T10:46:53.718Z Database size: 54874112 bytes I 2021-05-16T10:46:53.749Z Resuming trickle feed processing I 2021-05-16T10:47:11.338Z Successfully finished processing 1881 events (292 to be included in trickle feed) I 2021-05-16T10:53:29.468Z Database size: 54874112 bytes I 2021-05-16T10:53:29.500Z Resuming trickle feed processing I 2021-05-16T10:53:40.049Z Successfully finished processing 1004 events (350 to be included in trickle feed) I 2021-05-16T10:58:29.591Z Database size: 54874112 bytes I 2021-05-16T10:58:29.622Z Resuming trickle feed processing I 2021-05-16T10:58:41.816Z Successfully finished processing 1235 events (267 to be included in trickle feed) I 2021-05-16T11:03:51.227Z Database size: 54874112 bytes I 2021-05-16T11:03:51.259Z Resuming trickle feed processing I 2021-05-16T11:04:03.033Z Successfully finished processing 822 events (292 to be included in trickle feed) I 2021-05-16T11:09:28.267Z Database size: 54878208 bytes I 2021-05-16T11:09:28.298Z Resuming trickle feed processing I 2021-05-16T11:09:44.266Z Successfully finished processing 977 events (286 to be included in trickle feed) I 2021-05-16T11:14:28.030Z Database size: 54878208 bytes I 2021-05-16T11:14:28.072Z Resuming trickle feed processing I 2021-05-16T11:14:49.443Z Successfully finished processing 1350 events (263 to be included in trickle feed) I 2021-05-16T11:19:47.931Z Database size: 54874112 bytes I 2021-05-16T11:19:47.962Z Resuming trickle feed processing I 2021-05-16T11:19:59.057Z Successfully finished processing 852 events (297 to be included in trickle feed) I 2021-05-16T11:25:30.316Z Database size: 54878208 bytes I 2021-05-16T11:25:30.348Z Resuming trickle feed processing I 2021-05-16T11:25:46.069Z Successfully finished processing 1285 events (295 to be included in trickle feed) I 2021-05-16T11:31:09.164Z Database size: 54874112 bytes I 2021-05-16T11:31:09.195Z Resuming trickle feed processing I 2021-05-16T11:31:19.254Z Successfully finished processing 1248 events (296 to be included in trickle feed) I 2021-05-16T11:36:14.759Z Database size: 54874112 bytes I 2021-05-16T11:36:14.790Z Resuming trickle feed processing I 2021-05-16T11:36:24.920Z Successfully finished processing 813 events (268 to be included in trickle feed) I 2021-05-16T11:41:27.425Z Database size: 54874112 bytes I 2021-05-16T11:41:27.457Z Resuming trickle feed processing I 2021-05-16T11:41:41.083Z Successfully finished processing 834 events (293 to be included in trickle feed) I 2021-05-16T11:47:14.431Z Database size: 54878208 bytes I 2021-05-16T11:47:14.462Z Resuming trickle feed processing I 2021-05-16T11:47:30.414Z Successfully finished processing 1474 events (300 to be included in trickle feed) I 2021-05-16T11:52:43.112Z Database size: 54874112 bytes I 2021-05-16T11:52:43.143Z Resuming trickle feed processing I 2021-05-16T11:52:55.657Z Successfully finished processing 994 events (279 to be included in trickle feed) I 2021-05-16T11:58:21.767Z Database size: 54874112 bytes I 2021-05-16T11:58:21.798Z Resuming trickle feed processing I 2021-05-16T11:58:30.169Z Successfully finished processing 785 events (312 to be included in trickle feed) I 2021-05-16T12:03:09.831Z Database size: 54874112 bytes I 2021-05-16T12:03:09.878Z Resuming trickle feed processing I 2021-05-16T12:03:29.559Z Successfully finished processing 1583 events (258 to be included in trickle feed) I 2021-05-16T12:08:26.858Z Database size: 54874112 bytes I 2021-05-16T12:08:26.889Z Resuming trickle feed processing I 2021-05-16T12:08:35.698Z Successfully finished processing 753 events (278 to be included in trickle feed) I 2021-05-16T12:13:31.866Z Database size: 54874112 bytes I 2021-05-16T12:13:31.897Z Resuming trickle feed processing I 2021-05-16T12:13:54.725Z Successfully finished processing 1355 events (256 to be included in trickle feed) I 2021-05-16T12:18:46.098Z Database size: 54874112 bytes I 2021-05-16T12:18:46.129Z Resuming trickle feed processing I 2021-05-16T12:18:56.140Z Successfully finished processing 787 events (299 to be included in trickle feed) I 2021-05-16T12:24:26.758Z Database size: 54874112 bytes I 2021-05-16T12:24:26.789Z Resuming trickle feed processing I 2021-05-16T12:24:40.095Z Successfully finished processing 1098 events (291 to be included in trickle feed) I 2021-05-16T12:29:20.456Z Database size: 54878208 bytes I 2021-05-16T12:29:20.487Z Resuming trickle feed processing I 2021-05-16T12:29:30.871Z Successfully finished processing 1159 events (260 to be included in trickle feed) I 2021-05-16T12:35:02.668Z Database size: 54874112 bytes I 2021-05-16T12:35:02.699Z Resuming trickle feed processing I 2021-05-16T12:35:11.475Z Successfully finished processing 810 events (299 to be included in trickle feed) I 2021-05-16T12:40:15.877Z Database size: 54874112 bytes I 2021-05-16T12:40:15.908Z Resuming trickle feed processing I 2021-05-16T12:40:28.957Z Successfully finished processing 822 events (291 to be included in trickle feed) I 2021-05-16T12:45:10.672Z Database size: 54878208 bytes I 2021-05-16T12:45:10.719Z Resuming trickle feed processing I 2021-05-16T12:45:23.560Z Successfully finished processing 1311 events (250 to be included in trickle feed) I 2021-05-16T12:50:03.128Z Database size: 54874112 bytes I 2021-05-16T12:50:03.159Z Resuming trickle feed processing I 2021-05-16T12:50:12.787Z Successfully finished processing 747 events (261 to be included in trickle feed) I 2021-05-16T12:55:35.286Z Database size: 54874112 bytes I 2021-05-16T12:55:35.317Z Resuming trickle feed processing I 2021-05-16T12:55:50.948Z Successfully finished processing 866 events (279 to be included in trickle feed) I 2021-05-16T13:00:29.804Z Database size: 54874112 bytes I 2021-05-16T13:00:29.856Z Resuming trickle feed processing I 2021-05-16T13:00:53.120Z Successfully finished processing 1668 events (283 to be included in trickle feed) I 2021-05-16T13:05:35.256Z Database size: 54878208 bytes I 2021-05-16T13:05:35.287Z Resuming trickle feed processing I 2021-05-16T13:05:46.435Z Successfully finished processing 756 events (256 to be included in trickle feed) I 2021-05-16T13:10:39.458Z Database size: 54874112 bytes I 2021-05-16T13:10:39.505Z Resuming trickle feed processing I 2021-05-16T13:10:52.266Z Successfully finished processing 1068 events (266 to be included in trickle feed) I 2021-05-16T13:16:20.645Z Database size: 54874112 bytes I 2021-05-16T13:16:20.676Z Resuming trickle feed processing I 2021-05-16T13:16:44.883Z Successfully finished processing 1612 events (297 to be included in trickle feed) I 2021-05-16T13:21:46.605Z Database size: 54882304 bytes I 2021-05-16T13:21:46.637Z Resuming trickle feed processing I 2021-05-16T13:22:03.154Z Successfully finished processing 1230 events (309 to be included in trickle feed) I 2021-05-16T13:27:27.441Z Database size: 54882304 bytes I 2021-05-16T13:27:27.472Z Resuming trickle feed processing I 2021-05-16T13:27:36.985Z Successfully finished processing 865 events (285 to be included in trickle feed) I 2021-05-16T13:32:53.309Z Database size: 54878208 bytes I 2021-05-16T13:32:53.340Z Resuming trickle feed processing I 2021-05-16T13:33:04.792Z Successfully finished processing 1259 events (289 to be included in trickle feed) I 2021-05-16T13:37:45.811Z Database size: 54878208 bytes I 2021-05-16T13:37:45.842Z Resuming trickle feed processing I 2021-05-16T13:37:56.090Z Successfully finished processing 885 events (264 to be included in trickle feed) I 2021-05-16T13:42:45.940Z Database size: 54878208 bytes I 2021-05-16T13:42:46.050Z Resuming trickle feed processing I 2021-05-16T13:42:58.617Z Successfully finished processing 1182 events (271 to be included in trickle feed) I 2021-05-16T13:48:13.258Z Database size: 54878208 bytes I 2021-05-16T13:48:13.289Z Resuming trickle feed processing I 2021-05-16T13:48:22.560Z Successfully finished processing 1243 events (280 to be included in trickle feed) I 2021-05-16T13:53:03.747Z Database size: 54878208 bytes I 2021-05-16T13:53:03.776Z Resuming trickle feed processing I 2021-05-16T13:53:13.024Z Successfully finished processing 772 events (257 to be included in trickle feed) I 2021-05-16T13:58:43.898Z Database size: 54878208 bytes I 2021-05-16T13:58:43.929Z Resuming trickle feed processing I 2021-05-16T13:58:54.128Z Successfully finished processing 1296 events (302 to be included in trickle feed) I 2021-05-16T14:03:49.483Z Database size: 54878208 bytes I 2021-05-16T14:03:49.514Z Resuming trickle feed processing I 2021-05-16T14:04:00.137Z Successfully finished processing 934 events (271 to be included in trickle feed) I 2021-05-16T14:09:38.929Z Database size: 54882304 bytes I 2021-05-16T14:09:38.976Z Resuming trickle feed processing I 2021-05-16T14:09:47.819Z Successfully finished processing 829 events (304 to be included in trickle feed) I 2021-05-16T14:14:58.514Z Database size: 54878208 bytes I 2021-05-16T14:14:58.545Z Resuming trickle feed processing I 2021-05-16T14:15:14.470Z Successfully finished processing 1341 events (286 to be included in trickle feed) I 2021-05-16T14:20:29.186Z Database size: 54878208 bytes I 2021-05-16T14:20:29.223Z Resuming trickle feed processing I 2021-05-16T14:20:50.324Z Successfully finished processing 1189 events (302 to be included in trickle feed) I 2021-05-16T14:25:51.730Z Database size: 54882304 bytes I 2021-05-16T14:25:51.761Z Resuming trickle feed processing I 2021-05-16T14:26:11.037Z Successfully finished processing 964 events (277 to be included in trickle feed) I 2021-05-16T14:31:14.047Z Database size: 54882304 bytes I 2021-05-16T14:31:14.078Z Resuming trickle feed processing I 2021-05-16T14:31:23.914Z Successfully finished processing 1256 events (286 to be included in trickle feed) I 2021-05-16T14:36:54.755Z Database size: 54878208 bytes I 2021-05-16T14:36:54.786Z Resuming trickle feed processing I 2021-05-16T14:37:29.054Z Successfully finished processing 2050 events (310 to be included in trickle feed) I 2021-05-16T14:37:29.085Z Failed to process 1 events I 2021-05-16T14:42:43.316Z Database size: 54882304 bytes I 2021-05-16T14:42:43.348Z Resuming trickle feed processing I 2021-05-16T14:42:56.902Z Successfully finished processing 1163 events (313 to be included in trickle feed) I 2021-05-16T14:48:19.659Z Database size: 54882304 bytes I 2021-05-16T14:48:19.691Z Resuming trickle feed processing I 2021-05-16T14:48:30.324Z Successfully finished processing 1340 events (292 to be included in trickle feed) I 2021-05-16T14:53:41.288Z Database size: 54882304 bytes I 2021-05-16T14:53:41.319Z Resuming trickle feed processing I 2021-05-16T14:53:52.066Z Successfully finished processing 824 events (277 to be included in trickle feed) I 2021-05-16T14:58:58.536Z Database size: 54882304 bytes I 2021-05-16T14:58:58.567Z Resuming trickle feed processing I 2021-05-16T14:59:18.535Z Successfully finished processing 1559 events (291 to be included in trickle feed) I 2021-05-16T15:04:45.866Z Database size: 54882304 bytes I 2021-05-16T15:04:45.897Z Resuming trickle feed processing I 2021-05-16T15:04:55.137Z Successfully finished processing 886 events (303 to be included in trickle feed) I 2021-05-16T15:09:40.796Z Database size: 54882304 bytes I 2021-05-16T15:09:40.827Z Resuming trickle feed processing I 2021-05-16T15:09:48.343Z Successfully finished processing 734 events (263 to be included in trickle feed) I 2021-05-16T15:14:40.786Z Database size: 54882304 bytes I 2021-05-16T15:14:40.817Z Resuming trickle feed processing I 2021-05-16T15:14:59.475Z Successfully finished processing 1340 events (254 to be included in trickle feed) I 2021-05-16T15:19:44.581Z Database size: 54882304 bytes I 2021-05-16T15:19:44.612Z Resuming trickle feed processing I 2021-05-16T15:19:59.381Z Successfully finished processing 1094 events (284 to be included in trickle feed) I 2021-05-16T15:24:58.064Z Database size: 54882304 bytes I 2021-05-16T15:24:58.096Z Resuming trickle feed processing I 2021-05-16T15:25:17.383Z Successfully finished processing 1036 events (276 to be included in trickle feed) I 2021-05-16T15:30:29.715Z Database size: 54882304 bytes I 2021-05-16T15:30:29.742Z Resuming trickle feed processing I 2021-05-16T15:30:49.841Z Successfully finished processing 1437 events (292 to be included in trickle feed) I 2021-05-16T15:35:43.789Z Database size: 54882304 bytes I 2021-05-16T15:35:43.820Z Resuming trickle feed processing I 2021-05-16T15:36:18.820Z Successfully finished processing 2069 events (276 to be included in trickle feed) I 2021-05-16T15:36:18.851Z Failed to process 1 events I 2021-05-16T15:41:56.802Z Database size: 54882304 bytes I 2021-05-16T15:41:56.834Z Resuming trickle feed processing I 2021-05-16T15:42:39.618Z Successfully finished processing 2674 events (350 to be included in trickle feed) I 2021-05-16T15:47:27.485Z Database size: 54882304 bytes I 2021-05-16T15:47:27.517Z Resuming trickle feed processing I 2021-05-16T15:47:46.020Z Successfully finished processing 1494 events (284 to be included in trickle feed) I 2021-05-16T15:53:07.291Z Database size: 54882304 bytes I 2021-05-16T15:53:07.322Z Resuming trickle feed processing I 2021-05-16T15:53:20.300Z Successfully finished processing 971 events (294 to be included in trickle feed) I 2021-05-16T15:58:16.055Z Database size: 54882304 bytes I 2021-05-16T15:58:16.086Z Resuming trickle feed processing I 2021-05-16T15:58:28.062Z Successfully finished processing 926 events (288 to be included in trickle feed) I 2021-05-16T16:03:10.063Z Database size: 54882304 bytes I 2021-05-16T16:03:10.094Z Resuming trickle feed processing I 2021-05-16T16:03:29.499Z Successfully finished processing 1705 events (256 to be included in trickle feed) I 2021-05-16T16:08:20.902Z Database size: 54882304 bytes I 2021-05-16T16:08:20.933Z Resuming trickle feed processing I 2021-05-16T16:08:32.285Z Successfully finished processing 829 events (271 to be included in trickle feed) I 2021-05-16T16:14:04.691Z Database size: 54882304 bytes I 2021-05-16T16:14:04.738Z Resuming trickle feed processing I 2021-05-16T16:14:22.881Z Successfully finished processing 1479 events (297 to be included in trickle feed) I 2021-05-16T16:19:57.366Z Database size: 54882304 bytes I 2021-05-16T16:19:57.413Z Resuming trickle feed processing I 2021-05-16T16:20:08.565Z Successfully finished processing 1050 events (338 to be included in trickle feed) I 2021-05-16T16:25:43.864Z Database size: 54882304 bytes I 2021-05-16T16:25:43.895Z Resuming trickle feed processing I 2021-05-16T16:25:56.289Z Successfully finished processing 1185 events (297 to be included in trickle feed) I 2021-05-16T16:30:50.642Z Database size: 54882304 bytes I 2021-05-16T16:30:50.673Z Resuming trickle feed processing I 2021-05-16T16:31:01.954Z Successfully finished processing 1226 events (257 to be included in trickle feed) I 2021-05-16T16:35:56.808Z Database size: 54882304 bytes I 2021-05-16T16:35:56.840Z Resuming trickle feed processing I 2021-05-16T16:36:08.189Z Successfully finished processing 973 events (271 to be included in trickle feed) I 2021-05-16T16:41:02.491Z Database size: 54882304 bytes I 2021-05-16T16:41:02.522Z Resuming trickle feed processing I 2021-05-16T16:41:12.978Z Successfully finished processing 824 events (290 to be included in trickle feed) I 2021-05-16T16:46:31.039Z Database size: 54882304 bytes I 2021-05-16T16:46:31.070Z Resuming trickle feed processing I 2021-05-16T16:46:41.144Z Successfully finished processing 1324 events (286 to be included in trickle feed) I 2021-05-16T16:52:12.427Z Database size: 54882304 bytes I 2021-05-16T16:52:12.458Z Resuming trickle feed processing I 2021-05-16T16:52:24.717Z Successfully finished processing 922 events (299 to be included in trickle feed) I 2021-05-16T16:57:26.585Z Database size: 54882304 bytes I 2021-05-16T16:57:26.616Z Resuming trickle feed processing I 2021-05-16T16:57:38.957Z Successfully finished processing 1037 events (285 to be included in trickle feed) I 2021-05-16T17:02:23.404Z Database size: 54882304 bytes I 2021-05-16T17:02:23.436Z Resuming trickle feed processing I 2021-05-16T17:02:32.639Z Successfully finished processing 1220 events (261 to be included in trickle feed) I 2021-05-16T17:07:59.416Z Database size: 54882304 bytes I 2021-05-16T17:07:59.448Z Resuming trickle feed processing I 2021-05-16T17:08:10.371Z Successfully finished processing 866 events (296 to be included in trickle feed) I 2021-05-16T17:13:16.293Z Database size: 54882304 bytes I 2021-05-16T17:13:16.324Z Resuming trickle feed processing I 2021-05-16T17:13:34.856Z Successfully finished processing 1096 events (275 to be included in trickle feed) I 2021-05-16T17:18:47.024Z Database size: 54882304 bytes I 2021-05-16T17:18:47.055Z Resuming trickle feed processing I 2021-05-16T17:19:03.425Z Successfully finished processing 1664 events (309 to be included in trickle feed) I 2021-05-16T17:24:05.330Z Database size: 54882304 bytes I 2021-05-16T17:24:05.362Z Resuming trickle feed processing I 2021-05-16T17:24:16.705Z Successfully finished processing 870 events (281 to be included in trickle feed) I 2021-05-16T17:28:54.730Z Database size: 54882304 bytes I 2021-05-16T17:28:54.761Z Resuming trickle feed processing I 2021-05-16T17:29:04.963Z Successfully finished processing 1198 events (248 to be included in trickle feed) I 2021-05-16T17:33:57.942Z Database size: 54882304 bytes I 2021-05-16T17:33:57.973Z Resuming trickle feed processing I 2021-05-16T17:34:08.613Z Successfully finished processing 808 events (265 to be included in trickle feed) I 2021-05-16T17:39:32.885Z Database size: 54882304 bytes I 2021-05-16T17:39:32.916Z Resuming trickle feed processing I 2021-05-16T17:39:43.790Z Successfully finished processing 985 events (300 to be included in trickle feed) I 2021-05-16T17:45:17.267Z Database size: 54882304 bytes I 2021-05-16T17:45:17.288Z Resuming trickle feed processing I 2021-05-16T17:45:26.041Z Successfully finished processing 1338 events (301 to be included in trickle feed) I 2021-05-16T17:50:23.937Z Database size: 54882304 bytes I 2021-05-16T17:50:23.968Z Resuming trickle feed processing I 2021-05-16T17:50:31.828Z Successfully finished processing 757 events (271 to be included in trickle feed) I 2021-05-16T17:56:01.498Z Database size: 54882304 bytes I 2021-05-16T17:56:01.529Z Resuming trickle feed processing I 2021-05-16T17:56:15.733Z Successfully finished processing 1038 events (296 to be included in trickle feed) I 2021-05-16T18:01:33.226Z Database size: 54882304 bytes I 2021-05-16T18:01:33.258Z Resuming trickle feed processing I 2021-05-16T18:01:43.042Z Successfully finished processing 1414 events (313 to be included in trickle feed) I 2021-05-16T18:06:58.025Z Database size: 54882304 bytes I 2021-05-16T18:06:58.056Z Resuming trickle feed processing I 2021-05-16T18:07:08.321Z Successfully finished processing 846 events (273 to be included in trickle feed) I 2021-05-16T18:12:42.289Z Database size: 54882304 bytes I 2021-05-16T18:12:42.320Z Resuming trickle feed processing I 2021-05-16T18:13:02.630Z Successfully finished processing 1196 events (299 to be included in trickle feed) I 2021-05-16T18:17:55.798Z Database size: 54882304 bytes I 2021-05-16T18:17:55.830Z Resuming trickle feed processing I 2021-05-16T18:18:20.148Z Successfully finished processing 2750 events (291 to be included in trickle feed) I 2021-05-16T18:23:40.647Z Database size: 54882304 bytes I 2021-05-16T18:23:40.678Z Resuming trickle feed processing I 2021-05-16T18:23:52.841Z Successfully finished processing 976 events (304 to be included in trickle feed) I 2021-05-16T18:28:55.938Z Database size: 54882304 bytes I 2021-05-16T18:28:55.969Z Resuming trickle feed processing I 2021-05-16T18:29:06.426Z Successfully finished processing 1245 events (274 to be included in trickle feed) I 2021-05-16T18:33:47.012Z Database size: 54882304 bytes I 2021-05-16T18:33:47.044Z Resuming trickle feed processing I 2021-05-16T18:33:57.070Z Successfully finished processing 929 events (258 to be included in trickle feed) I 2021-05-16T18:39:04.157Z Database size: 54882304 bytes I 2021-05-16T18:39:04.189Z Resuming trickle feed processing I 2021-05-16T18:39:14.379Z Successfully finished processing 956 events (291 to be included in trickle feed) I 2021-05-16T18:44:00.647Z Database size: 54882304 bytes I 2021-05-16T18:44:00.679Z Resuming trickle feed processing I 2021-05-16T18:44:11.701Z Successfully finished processing 1433 events (258 to be included in trickle feed) I 2021-05-16T18:49:16.495Z Database size: 54882304 bytes I 2021-05-16T18:49:16.519Z Resuming trickle feed processing I 2021-05-16T18:49:24.282Z Successfully finished processing 860 events (273 to be included in trickle feed) I 2021-05-16T18:54:59.346Z Database size: 54882304 bytes I 2021-05-16T18:54:59.378Z Resuming trickle feed processing I 2021-05-16T18:55:11.517Z Successfully finished processing 997 events (296 to be included in trickle feed) I 2021-05-16T19:00:37.530Z Database size: 54882304 bytes I 2021-05-16T19:00:37.561Z Resuming trickle feed processing I 2021-05-16T19:00:48.825Z Successfully finished processing 1330 events (318 to be included in trickle feed) I 2021-05-16T19:05:52.177Z Database size: 54882304 bytes I 2021-05-16T19:05:52.209Z Resuming trickle feed processing I 2021-05-16T19:06:04.067Z Successfully finished processing 840 events (271 to be included in trickle feed) I 2021-05-16T19:10:58.299Z Database size: 54882304 bytes I 2021-05-16T19:10:58.331Z Resuming trickle feed processing I 2021-05-16T19:11:15.413Z Successfully finished processing 1086 events (267 to be included in trickle feed) I 2021-05-16T19:16:18.873Z Database size: 54882304 bytes I 2021-05-16T19:16:18.904Z Resuming trickle feed processing I 2021-05-16T19:16:37.949Z Successfully finished processing 1569 events (279 to be included in trickle feed) I 2021-05-16T19:22:04.643Z Database size: 54882304 bytes I 2021-05-16T19:22:04.675Z Resuming trickle feed processing I 2021-05-16T19:22:17.304Z Successfully finished processing 1079 events (321 to be included in trickle feed) I 2021-05-16T19:27:32.968Z Database size: 54882304 bytes I 2021-05-16T19:27:32.999Z Resuming trickle feed processing I 2021-05-16T19:27:44.339Z Successfully finished processing 906 events (288 to be included in trickle feed) I 2021-05-16T19:32:24.294Z Database size: 54882304 bytes I 2021-05-16T19:32:24.325Z Resuming trickle feed processing I 2021-05-16T19:32:36.431Z Successfully finished processing 1312 events (250 to be included in trickle feed) I 2021-05-16T19:37:18.927Z Database size: 54882304 bytes I 2021-05-16T19:37:18.958Z Resuming trickle feed processing I 2021-05-16T19:37:28.167Z Successfully finished processing 769 events (275 to be included in trickle feed) I 2021-05-16T19:42:10.891Z Database size: 54882304 bytes I 2021-05-16T19:42:10.922Z Resuming trickle feed processing I 2021-05-16T19:42:30.565Z Successfully finished processing 1370 events (260 to be included in trickle feed) I 2021-05-16T19:47:21.486Z Database size: 54890496 bytes I 2021-05-16T19:47:21.517Z Resuming trickle feed processing I 2021-05-16T19:47:36.190Z Successfully finished processing 1373 events (268 to be included in trickle feed) I 2021-05-16T19:52:18.575Z Database size: 54890496 bytes I 2021-05-16T19:52:18.622Z Resuming trickle feed processing I 2021-05-16T19:52:31.533Z Successfully finished processing 894 events (253 to be included in trickle feed) I 2021-05-16T19:57:19.021Z Database size: 54890496 bytes I 2021-05-16T19:57:19.052Z Resuming trickle feed processing I 2021-05-16T19:57:34.908Z Successfully finished processing 1211 events (281 to be included in trickle feed) I 2021-05-16T20:03:00.689Z Database size: 54890496 bytes I 2021-05-16T20:03:00.720Z Resuming trickle feed processing I 2021-05-16T20:03:10.424Z Successfully finished processing 1284 events (306 to be included in trickle feed) I 2021-05-16T20:08:38.695Z Database size: 54890496 bytes I 2021-05-16T20:08:38.726Z Resuming trickle feed processing I 2021-05-16T20:08:52.374Z Successfully finished processing 1286 events (296 to be included in trickle feed) I 2021-05-16T20:13:49.461Z Database size: 54890496 bytes I 2021-05-16T20:13:49.508Z Resuming trickle feed processing I 2021-05-16T20:14:07.875Z Successfully finished processing 1319 events (269 to be included in trickle feed) I 2021-05-16T20:18:51.666Z Database size: 54890496 bytes I 2021-05-16T20:18:51.698Z Resuming trickle feed processing I 2021-05-16T20:19:00.677Z Successfully finished processing 904 events (273 to be included in trickle feed) I 2021-05-16T20:23:45.526Z Database size: 54890496 bytes I 2021-05-16T20:23:45.557Z Resuming trickle feed processing I 2021-05-16T20:23:59.355Z Successfully finished processing 1003 events (265 to be included in trickle feed) I 2021-05-16T20:29:27.714Z Database size: 54894592 bytes I 2021-05-16T20:29:27.808Z Resuming trickle feed processing I 2021-05-16T20:29:41.453Z Successfully finished processing 1673 events (299 to be included in trickle feed) I 2021-05-16T20:34:57.256Z Database size: 54890496 bytes I 2021-05-16T20:34:57.287Z Resuming trickle feed processing I 2021-05-16T20:35:09.449Z Successfully finished processing 963 events (278 to be included in trickle feed) I 2021-05-16T20:40:27.797Z Database size: 54890496 bytes I 2021-05-16T20:40:27.828Z Resuming trickle feed processing I 2021-05-16T20:40:38.009Z Successfully finished processing 898 events (316 to be included in trickle feed) I 2021-05-16T20:45:49.235Z Database size: 54890496 bytes I 2021-05-16T20:45:49.266Z Resuming trickle feed processing I 2021-05-16T20:45:57.353Z Successfully finished processing 1263 events (273 to be included in trickle feed) I 2021-05-16T20:51:12.070Z Database size: 54890496 bytes I 2021-05-16T20:51:12.102Z Resuming trickle feed processing I 2021-05-16T20:51:23.577Z Successfully finished processing 1002 events (278 to be included in trickle feed) I 2021-05-16T20:56:03.926Z Database size: 54890496 bytes I 2021-05-16T20:56:03.957Z Resuming trickle feed processing I 2021-05-16T20:56:12.907Z Successfully finished processing 769 events (263 to be included in trickle feed) I 2021-05-16T21:01:35.574Z Database size: 54890496 bytes I 2021-05-16T21:01:35.605Z Resuming trickle feed processing I 2021-05-16T21:01:55.728Z Successfully finished processing 1729 events (300 to be included in trickle feed) I 2021-05-16T21:07:15.538Z Database size: 54890496 bytes I 2021-05-16T21:07:15.569Z Resuming trickle feed processing I 2021-05-16T21:07:27.337Z Successfully finished processing 965 events (293 to be included in trickle feed) I 2021-05-16T21:12:06.476Z Database size: 54890496 bytes I 2021-05-16T21:12:06.507Z Resuming trickle feed processing I 2021-05-16T21:12:18.333Z Successfully finished processing 877 events (262 to be included in trickle feed) I 2021-05-16T21:17:31.690Z Database size: 54890496 bytes I 2021-05-16T21:17:31.721Z Resuming trickle feed processing I 2021-05-16T21:17:48.612Z Successfully finished processing 1422 events (291 to be included in trickle feed) I 2021-05-16T21:23:10.424Z Database size: 54890496 bytes I 2021-05-16T21:23:10.454Z Resuming trickle feed processing I 2021-05-16T21:23:20.465Z Successfully finished processing 950 events (308 to be included in trickle feed) I 2021-05-16T21:28:40.380Z Database size: 54890496 bytes I 2021-05-16T21:28:40.411Z Resuming trickle feed processing I 2021-05-16T21:28:54.424Z Successfully finished processing 1536 events (279 to be included in trickle feed) I 2021-05-16T21:33:33.694Z Database size: 54890496 bytes I 2021-05-16T21:33:33.726Z Resuming trickle feed processing I 2021-05-16T21:33:40.959Z Successfully finished processing 734 events (261 to be included in trickle feed) I 2021-05-16T21:38:43.271Z Database size: 54890496 bytes I 2021-05-16T21:38:43.302Z Resuming trickle feed processing I 2021-05-16T21:38:52.259Z Successfully finished processing 795 events (284 to be included in trickle feed) I 2021-05-16T21:43:46.568Z Database size: 54890496 bytes I 2021-05-16T21:43:46.599Z Resuming trickle feed processing I 2021-05-16T21:43:56.344Z Successfully finished processing 1265 events (261 to be included in trickle feed) I 2021-05-16T21:49:18.042Z Database size: 54890496 bytes I 2021-05-16T21:49:18.074Z Resuming trickle feed processing I 2021-05-16T21:49:29.150Z Successfully finished processing 1091 events (294 to be included in trickle feed) I 2021-05-16T21:54:26.409Z Database size: 54890496 bytes I 2021-05-16T21:54:26.440Z Resuming trickle feed processing I 2021-05-16T21:54:37.994Z Successfully finished processing 850 events (267 to be included in trickle feed) I 2021-05-16T21:59:26.926Z Database size: 54890496 bytes I 2021-05-16T21:59:26.957Z Resuming trickle feed processing I 2021-05-16T21:59:49.560Z Successfully finished processing 1819 events (270 to be included in trickle feed) I 2021-05-16T22:05:25.196Z Database size: 54890496 bytes I 2021-05-16T22:05:25.227Z Resuming trickle feed processing I 2021-05-16T22:05:37.929Z Successfully finished processing 1049 events (323 to be included in trickle feed) I 2021-05-16T22:11:16.240Z Database size: 54890496 bytes I 2021-05-16T22:11:16.271Z Resuming trickle feed processing I 2021-05-16T22:11:29.468Z Successfully finished processing 1017 events (302 to be included in trickle feed) I 2021-05-16T22:16:44.572Z Database size: 54890496 bytes I 2021-05-16T22:16:44.603Z Resuming trickle feed processing I 2021-05-16T22:17:02.791Z Successfully finished processing 1618 events (303 to be included in trickle feed) I 2021-05-16T22:22:02.859Z Database size: 54894592 bytes I 2021-05-16T22:22:02.890Z Resuming trickle feed processing I 2021-05-16T22:22:13.275Z Successfully finished processing 817 events (283 to be included in trickle feed) I 2021-05-16T22:27:20.920Z Database size: 54894592 bytes I 2021-05-16T22:27:20.951Z Resuming trickle feed processing I 2021-05-16T22:27:33.908Z Successfully finished processing 1089 events (274 to be included in trickle feed) I 2021-05-16T22:33:04.417Z Database size: 54894592 bytes I 2021-05-16T22:33:04.449Z Resuming trickle feed processing I 2021-05-16T22:33:16.091Z Successfully finished processing 1370 events (299 to be included in trickle feed) I 2021-05-16T22:38:32.057Z Database size: 54894592 bytes I 2021-05-16T22:38:32.088Z Resuming trickle feed processing I 2021-05-16T22:38:39.861Z Successfully finished processing 820 events (297 to be included in trickle feed) I 2021-05-16T22:43:48.184Z Database size: 54894592 bytes I 2021-05-16T22:43:48.216Z Resuming trickle feed processing I 2021-05-16T22:44:03.813Z Successfully finished processing 1381 events (287 to be included in trickle feed) I 2021-05-16T22:48:48.271Z Database size: 54894592 bytes I 2021-05-16T22:48:48.302Z Resuming trickle feed processing I 2021-05-16T22:48:59.154Z Successfully finished processing 886 events (256 to be included in trickle feed) I 2021-05-16T22:54:17.392Z Database size: 54894592 bytes I 2021-05-16T22:54:17.438Z Resuming trickle feed processing I 2021-05-16T22:54:25.598Z Successfully finished processing 826 events (289 to be included in trickle feed) I 2021-05-16T22:59:41.183Z Database size: 54894592 bytes I 2021-05-16T22:59:41.214Z Resuming trickle feed processing I 2021-05-16T22:59:47.844Z Successfully finished processing 1246 events (292 to be included in trickle feed) I 2021-05-16T23:04:35.443Z Database size: 54894592 bytes I 2021-05-16T23:04:35.475Z Resuming trickle feed processing I 2021-05-16T23:04:47.136Z Successfully finished processing 932 events (267 to be included in trickle feed) I 2021-05-16T23:10:14.232Z Database size: 54894592 bytes I 2021-05-16T23:10:14.263Z Resuming trickle feed processing I 2021-05-16T23:10:22.409Z Successfully finished processing 925 events (284 to be included in trickle feed) I 2021-05-16T23:15:55.179Z Database size: 54894592 bytes I 2021-05-16T23:15:55.210Z Resuming trickle feed processing I 2021-05-16T23:16:19.405Z Successfully finished processing 2810 events (299 to be included in trickle feed) I 2021-05-16T23:21:25.254Z Database size: 54894592 bytes I 2021-05-16T23:21:25.301Z Resuming trickle feed processing I 2021-05-16T23:21:41.049Z Successfully finished processing 981 events (310 to be included in trickle feed) I 2021-05-16T23:26:34.573Z Database size: 54894592 bytes I 2021-05-16T23:26:34.604Z Resuming trickle feed processing I 2021-05-16T23:26:51.565Z Successfully finished processing 1008 events (268 to be included in trickle feed) I 2021-05-16T23:32:11.439Z Database size: 54894592 bytes I 2021-05-16T23:32:11.470Z Resuming trickle feed processing I 2021-05-16T23:32:21.320Z Successfully finished processing 1285 events (287 to be included in trickle feed) I 2021-05-16T23:37:33.163Z Database size: 54894592 bytes I 2021-05-16T23:37:33.194Z Resuming trickle feed processing I 2021-05-16T23:37:41.644Z Successfully finished processing 802 events (300 to be included in trickle feed) I 2021-05-16T23:43:01.944Z Database size: 54894592 bytes I 2021-05-16T23:43:01.991Z Resuming trickle feed processing I 2021-05-16T23:43:18.690Z Successfully finished processing 1240 events (288 to be included in trickle feed) I 2021-05-16T23:48:09.629Z Database size: 54894592 bytes I 2021-05-16T23:48:09.676Z Resuming trickle feed processing I 2021-05-16T23:48:25.291Z Successfully finished processing 1688 events (267 to be included in trickle feed) I 2021-05-16T23:53:56.998Z Database size: 54894592 bytes I 2021-05-16T23:53:57.032Z Resuming trickle feed processing I 2021-05-16T23:54:07.750Z Successfully finished processing 887 events (302 to be included in trickle feed) I 2021-05-16T23:58:48.819Z Database size: 54894592 bytes I 2021-05-16T23:58:48.850Z Resuming trickle feed processing I 2021-05-16T23:58:57.447Z Successfully finished processing 1319 events (277 to be included in trickle feed)
Here is the 05/16, nothing seems unusual.
Not too many events, but quite a high number of items that are reported in the trickle feed to Central.
You can see what the last 10 trickle feed submissions contained under:
C:\ProgramData\Sophos\Endpoint Defense\Data\Edr Saved Data\Backup\
If you use 7Zip for example you can unpack these .dat files (the last one will do as a starter, I assume there is a lot of duplication) then unpack that resulting file and you should get to some json files. It would be interesting to see what they contain.
Not too many events, but quite a high number of items that are reported in the trickle feed to Central.
You can see what the last 10 trickle feed submissions contained under:
C:\ProgramData\Sophos\Endpoint Defense\Data\Edr Saved Data\Backup\
If you use 7Zip for example you can unpack these .dat files (the last one will do as a starter, I assume there is a lot of duplication) then unpack that resulting file and you should get to some json files. It would be interesting to see what they contain.
I'd rather not share the whole file, but I took one dat file and decrompressed it and 95% of the JSON looks like :
{"networkConnection":{"ip":"127.0.0.1","port":4679,"protocolNumber":6},"peImageSha256":"a1def7b599415addbb4eda303affc20386a794c81de2405a8e88dc848e5b2626","processPath":{"fileSystemType":"msNtfs","networkPath":false,"normalized":true,"os":"windows","path":"C:\\Program Files (x86)\\Eaton\\IntelligentPowerProtector\\mc2.exe"},"timestamp":"2021-05-18T06:11:56.4108811Z"}
Is this something normal or is it indicating that this software is making trouble ?
Is the mc2.exe a Windows service? If it dominates the data heavily, it would be interesting to stop the service, assuming it isn’t critical for around 30 mins while observing the log mentioned before and the cpu usage during the next edr trickle feed preparations which run every 5 mins. Does the number of submitted items drop to almost 0?
I forgot to say, I would probably use Process Explorer to determine if that process is a service and if so what is the name. The tree view would also be the easiest way to show if it’s a child process of a service for example. You can also look at the cpu usage of the sspedr.exe process in the graph tab to judge any difference.
Ok so even after stopping the service and closing all instances of mc2.exe (none shown in Task Manager or Process Explorer), the file is still full of the same line than before.
Has the number in the ‘include in trickle feed’ come down? If not, what is in the latest json files under the backup for?
It does :
I 2021-05-18T10:00:10.240Z Successfully finished processing 1648 events (367 to be included in trickle feed) I 2021-05-18T10:04:53.147Z Database size: 55058432 bytes I 2021-05-18T10:04:53.175Z Resuming trickle feed processing I 2021-05-18T10:05:21.313Z Successfully finished processing 1311 events (342 to be included in trickle feed) I 2021-05-18T10:10:08.580Z Database size: 55058432 bytes I 2021-05-18T10:10:08.610Z Resuming trickle feed processing I 2021-05-18T10:10:39.988Z Successfully finished processing 1553 events (271 to be included in trickle feed) I 2021-05-18T10:15:56.503Z Database size: 55058432 bytes I 2021-05-18T10:15:56.542Z Resuming trickle feed processing I 2021-05-18T10:16:39.184Z Successfully finished processing 2543 events (16 to be included in trickle feed) I 2021-05-18T10:21:56.053Z Database size: 55058432 bytes I 2021-05-18T10:21:56.090Z Resuming trickle feed processing I 2021-05-18T10:22:17.622Z Successfully finished processing 885 events (31 to be included in trickle feed) I 2021-05-18T10:27:54.253Z Database size: 55058432 bytes I 2021-05-18T10:27:54.289Z Resuming trickle feed processing I 2021-05-18T10:28:13.594Z Successfully finished processing 665 events (12 to be included in trickle feed) I 2021-05-18T10:33:30.085Z Database size: 55058432 bytes I 2021-05-18T10:33:30.112Z Resuming trickle feed processing I 2021-05-18T10:33:47.924Z Successfully finished processing 1102 events (13 to be included in trickle feed) I 2021-05-18T10:38:41.969Z Database size: 55058432 bytes I 2021-05-18T10:38:42.009Z Resuming trickle feed processing I 2021-05-18T10:39:03.549Z Successfully finished processing 536 events (24 to be included in trickle feed)
Also, I might not have waited enough long enough after stopping the service/process, but .dat files were 5Ko and are now around 2-3Ko, still with the same lines but a lot less.
I think the SED driver flushes the data to the event journal files every few minutes, then you have to wait for the EDR process to pass them, so I can see you might have to wait 10 minutes for the previous data to be processed and for the subsequent runs of sspedr to quieten down.
I suppose the key question now is, with the number of events being reported in the trickle feed reduced from around 300 to 20, do you find less activity? Is the activity that process is creating responsible for the activity you are seeing?
Unfortunately, the problem still persist. The peak disk activity last less time, but it is still present everytime the event journal is dumped. I guess it is just how the driver works ?
Is it more when the sspedr.exe process reading the journal files that have been dumped by the sophosed.sys driver during the past 5 minutes or the disk IO on the sqlite db?
You'd probably need to analyze a WPR log for the details to be sure.
In an admin prompt you can run:
wpr.exe -start GeneralProfile
Then Capture the issue then run up to about 2 mins, then run:
wpr.exe -stop C:\GeneralProfil.etl
You can open the etl file in Windows Performance Analyzer (MS store of part of the Windows Performance Toolkit that comes with the SDK)
If it is disk, you're most interested in, there are specific disk/IO profiles, namely, DiskIO and FileIO
wpr.exe -start DiskIO
or
wpr.exe -start FileIO
These will shed more light on IO specifics but GeneralProfile is typically enough insight.
From your logs the DB file is only 50 MB, so it's not spending any time purging the db as it would it it was around the 500MB max size.
The config options are under:
HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EndpointDefense\PolicyConfiguration
edr_max_tracking_database_size_mb (500MB)
edr_upload_frequency is the 5 min interval. It doesn't help to extend it, as the work will just have to be done on the next run.
I'm sorry it's my first time using Windows Performance Analyzer, don't know if this is useful :
Looks like SspEdr.exe is doing a lot of 4096 or 8192 read/write
CPU during the problem has no specific peak (the ones you see are WmiSEPrv.exe)
