Question for y'all.... I have some really simple osquery hosts. standalone, log via syslog. I'm finding that for any differential query, I really want a snapshot query on some frequency. It looks like

Schedule epoch

would address some of this, but without a TLS server that's harder to leverage. I can duplicate all my queries, but maybe people have a more clever way? I kinda also want to float the idea that instead of differential and snapshot queries, a scheduled config should have a

snapshot_interval

and a

differential_interval

and reduce the duplication