is there some amount of lag time, or does osquery pick it up and insert it on the fly?