hi, i have a question. when tables queried they communicates with the related OS API and gathers the real time data (except event based data for example with windows_events table we can gather historical data using time column if i’m not wrong, for now this isn’t matter) for usb_events table, imagine that we set query interval as 10 minutes. “Between the any two of these queries”, when we plug a usb device and remove from the agent, in this case, the result of the query doesn’t contain the log of these events. (?)