hey y'all, can anyone speak to section of code, where the subscriber expiration warning is emitted?
https://github.com/osquery/osquery/blob/0f3ad48b77bc6e0592fbd2826ccc8fb61cf4b89c/osquery/events/events.cpp#L742
does this still apply if you only have 1 query that uses an events table? i had thought using events_expiry 1 meant they'd be around even if i was only querying every 5 seconds and expire immediately after being selected; this seems to complain that my expiry is not 3x the interval