I see SSHD logs in /var/log/messages and osquery is still reporting

Successfully sent 0 of 0 logs to Kinesis

. I can see rsyslog is writing logs in the pipe, but it seems that osquery or the Kinesis plugin is not picking up anything. I wonder how I could verify that.