Hi I’m having difficulties using the syslog consumption feature. I can see logs are being written to the pipe but osquery is not showing anything when I query syslog table. I’ve checked https://github.com/facebook/osquery/issues/1964 also. The pipe path is correct, osquery opens it successfully also:

syslog.cpp:97] Successfully opened pipe for syslog ingestion: /var/osquery/syslog_pipe

Is anyone using this?