but i'm now seeing some differences between result sets to same queries returned if i run the query from the second container (pointed at the em socket) vs from the

osqueryi

interface in the first container (which is running

osqueryd

)