Hey all. Posting this here as I dont think this is a windows issue, but maybe an osQ mis-config on my part… After a windows machine blue screens, we see an event ID of 1001 appear in the system event log on Windows, but we don’t see those events in the BigQuery table we have the data feeding into. I’m wondering if this is due to me querying the events every 5 seconds, and the machine not having internet connectivity for a while. But because osQuery has already “queried” the event table, it then ignores those events once internet connectivity comes back up