what is the difference Logging: snaphot or differential for event based tables? For example i’m querying windows_events table configured the options “Logging: Snapshot” at Kolide Fleet and as the result of this, i see “action”:“snapshot” in the tail of the logs and later, when i change the “Snapshot” to “Differential”, this time i see “action”:“added” in the tail of the logs. However the all the rest of the logs are same, only change is the action:added or action:snapshot in my flag file i use this flag --logger_snapshot_event_type=true in other word, when that flag and an event based table is used, no matter to use either Logging:snapshot or differential ?