yeah, i almost turned off osquery when exclude_paths weren't a thing. because specifically of /etc/httpd/logs when I wanted to monitor /etc/%%