Extreme High CPU Usage with sophps protection with Linux

We are seeing the same issue. The `osqueryd` process is sitting at 75-80% usage. I've confirmed in Central that no scans are running, and restarting the `sophos-spl` service has no effect (goes back to high usage after restart)

Host running Ubuntu 18.04, sophos agent version 1.1.10.6

Hello Hayden,

For OSquery that takes 75-80% of usage, you can clear out the directory /opt/sophos-spl/plugins/edr/var/osquery.db.

You can run  running rm -rf /opt/sophos-spl/plugins/edr/var/osquery.db/* This will clear out the database. You can also perform individual deletion through the above path shared Shorting by (Size or Date). The OSquery will repopulate the database once up and running. 

Hello Hayden,

For OSquery that takes 75-80% of usage, you can clear out the directory /opt/sophos-spl/plugins/edr/var/osquery.db.

You can run  running rm -rf /opt/sophos-spl/plugins/edr/var/osquery.db/* This will clear out the database. You can also perform individual deletion through the above path shared Shorting by (Size or Date). The OSquery will repopulate the database once up and running.