osqueryd:  {"name":"pack_incident-response_last","hostIdentifier":"<redacted>","calendarTime":"Tue Mar 27 13:02:03 2018 UTC","unixTime":"1522155723","epoch":"0","counter":"92","columns":{"host":"","pid":"29443","time":"1522154231","tty":"pts\/0","type":"8","username":""},"action":"added"}