Hi Aashish, > So I am running a new detection package and everything seemed right but somehow since yesterday each worker is running at 5.7% to 6.3% CPU and not generating logs. my guess would be that the script makes (heavy) use of tables and table expiration, right? Can you share the script? Jan