Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vQT3z-008ESl-2p for pgsql-general@arkaria.postgresql.org; Tue, 02 Dec 2025 16:17:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vQT3y-008pBR-34 for pgsql-general@arkaria.postgresql.org; Tue, 02 Dec 2025 16:17:15 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vQT3y-008pBJ-0N for pgsql-general@lists.postgresql.org; Tue, 02 Dec 2025 16:17:14 +0000 Received: from fout-b2-smtp.messagingengine.com ([202.12.124.145]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vQT3v-002m7Z-1p for pgsql-general@lists.postgresql.org; Tue, 02 Dec 2025 16:17:13 +0000 Received: from phl-compute-02.internal (phl-compute-02.internal [10.202.2.42]) by mailfout.stl.internal (Postfix) with ESMTP id 1EFDF1D00229; Tue, 2 Dec 2025 11:17:11 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-02.internal (MEProxy); Tue, 02 Dec 2025 11:17:11 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aklaver.com; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm3; t=1764692230; x=1764778630; bh=OU5Kw/NJ9tfAfYARU328ZjyX7a677EHxA+aT3rwSwQk=; b= T/NWW7NoS1sk/QjKq9tlT3b8+UBv3omjltifPmlDKx8uSEcgiFcPDigoEkfO2nHz 2pdCcyZcfA71+nzWVDcZlchtAiAt4cV2du+P3ISBL3DZ74+sOQOYZ8Bwpgagklc1 BctAJfTOlizP7AJwz2zi2qpPmSsiYTiEkejnbDIHEgFDrJMtCbECaxaIBeNbthH/ LYe9DD6R6ZsnEtAR7GttjIc1iB/+JwbH9vbZgNQOpLNNNZa1MCrBmoMNDfnVlXsQ YWcxKDBUXukIlC04res76EMPqd0UzEg8NdCpb4V04AwGsOzNywEq24hnYnVcXVip DAPcal7WAws+O35820q0jA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; t=1764692230; x=1764778630; bh=O U5Kw/NJ9tfAfYARU328ZjyX7a677EHxA+aT3rwSwQk=; b=rksU7pJJf68jWWB2r E1fNlBbqww1hJ0AA/OXZD7JiLA6aF0M8dGabLHvQnD9D/Fh7BdBiwvvX0TLryhT+ NRhmn8OSaZW/NylB8rSXgjmo/hzXfdnGUak79RNq5pjchiQPIbI7UveJOZtki3Cc CU3rrRrC7aFCjGa055U46lEt0Ztm+k8sL2i6zCA98bs50dDU0rxLVCxr6ZgSX/Z6 ZLtVFSFRoDenwkuY2RvDcUxiR+4r+6NrFEWvoqJxwFeHya0GIsAYctWmfcfsjwax 83qYZHnfoZKHQ+JBCt8WbxMK3ZpvcnhW9eEAJc9jaLwYDOnNkAySb+IwpRPPjLrp nyu3g== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefgedrtddtgdehkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegrihhl ohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpe fkffggfgfuvfhfhfgjtgfgsehtkeertddtvdejnecuhfhrohhmpeetughrihgrnhcumfhl rghvvghruceorggurhhirghnrdhklhgrvhgvrhesrghklhgrvhgvrhdrtghomheqnecugg ftrfgrthhtvghrnhepffelgeeifefgveduhedthfekuedtffejveegffegjeevtdehgfdu ieetfeehjeehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrh homheprggurhhirghnrdhklhgrvhgvrhesrghklhgrvhgvrhdrtghomhdpnhgspghrtghp thhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtoheptgholhhinhhthhgrrh htsehgmhgrihhlrdgtohhmpdhrtghpthhtohepphhgshhqlhdqghgvnhgvrhgrlheslhhi shhtshdrphhoshhtghhrvghsqhhlrdhorhhg X-ME-Proxy: Feedback-ID: i76984098:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 2 Dec 2025 11:17:10 -0500 (EST) Message-ID: <085ea19f-8e97-4750-9916-104b2a0cabcc@aklaver.com> Date: Tue, 2 Dec 2025 08:17:09 -0800 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: wdavdaemon / Microsoft Defender for Endpoint on Linux and slow Postgres recovery? To: Colin 't Hart , PostgreSQL General References: Content-Language: en-US From: Adrian Klaver In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 12/2/25 06:47, Colin 't Hart wrote: > Hi, > > One of my clients has Microsoft Defender for Endpoint on Linux installed > on their Postgres servers. > > I was testing a database restore from pgBackRest. The restore itself > seemed to complete in a reasonable amount of time, but then the Postgres > recovery started and it was extremely slow to retrieve and apply the WAL > files. > > I noticed wdavdaemon taking most of the CPU, and Postgres getting very > little. > > I wonder if anyone here has any experience with configuring exclusions > so that the WAL files can be processed faster? > > AND > > Any advice on what to communicate with their IT department about using > this on their database servers? I've never encountered it on Linux before... Advice, don't let any Microsoft product contact anything you care about. > > Thanks, > > Colin -- Adrian Klaver adrian.klaver@aklaver.com