@cburr a query with an interval of 1 year will likely never run, unless your boxes have mad uptime and you never update osquery 🙂