High CPU From Osquery On Sensor Version 4.1

Products

• Carbon Black Cloud Endpoint Standard

Issue/Introduction

Seeing High CPU from Osquery After Reboot

Environment

• Carbon Black Cloud Sensor: 4.1
• Windows OS: All Supported Versions

Cause

4.1 added a system scan which can cause increased CPU usage

Resolution

1. Add a CFG.ini config value EnableSystemSettingsScan=0 via these instructions.
2. If this resolves the issue support can be contacted to apply this to specific policies.
3. Engineering is looking into a long term fix as well.