The function

deserializeQueryLogItem

and

deserializeQueryLogItemJSON

is missing from 4.x. There is a PR which removes them (https://github.com/osquery/osquery/pull/5543). I am trying to port an extension to 4.x which uses these utility functions. Is there a plan to restore them?