Only difference between the boxes is the 1 box that returns all results has been rebooted since osquery was installed