Is there a "one-time" query that hosts can run when they first install osquery? Or is there already some feature which will allow me to look through results and find a new host? (Apart from analyzing the data afterwards). I thought a query with an interval of a year might be ok, but wondering if there is a better route