coffee
05/22/2017, 5:34 PMReceived fewer fields than expected in line: 95871+00:00","i-82c5b41b","6","authpriv","CRON[17240]:"," pam_unix(cron:session): session opened for user root by (uid=0)" for osquery v2.4.2. We confirmed this error is from this line: https://github.com/facebook/osquery/blob/master/osquery/events/linux/syslog.cpp#L173, which is informed via https://github.com/facebook/osquery/blob/master/osquery/events/linux/syslog.cpp#L187-L213