On web page … --events_max the maximum number of events to buffer, default 1000. Although I didnt set this flag in my flag file, I see a warning message told that couldnt get the logs because of event number exceeded 50000 events in my osquery_results or status log file