Sysinternals / SysmonForLinux

MIT License
1.68k stars 180 forks source link

Sysmon service fails after a while #150

Closed trombomart closed 7 months ago

trombomart commented 9 months ago

Describe the bug When the Sysmon service is started (systemctl start sysmon), the service fails after some time. The duration is not the same for every run. One time the service fails within a couple of seconds and the other time it fails after two minutes. Also, the Sysmon service only fails for about half of our servers. The other half is working fine.

To Reproduce Unknown

Sysmon version v1.3.1

Distro/kernel version Operating System: Red Hat Enterprise Linux 8.8 (Ootpa) CPE OS Name: cpe:/o:redhat:enterprise_linux:8::baseos Kernel: Linux 4.18.0-477.10.1.el8_8.x86_64 Architecture: x86-64

Sysmon configuration config.txt

Logs status.txt journalctl.txt (reverse chronological order)

Expected behavior The Sysmon service runs without failing after a short amount of time

Additional context We also notice a memory leak, maybe this has something to do with the problem.