we just started getting errors like the following:...
# general
c
we just started getting errors like the following:
Received fewer fields than expected in line: 95871+00:00","i-82c5b41b","6","authpriv","CRON[17240]:"," pam_unix(cron:session): session opened for user root by (uid=0)"
for osquery v2.4.2. We confirmed this error is from this line: https://github.com/facebook/osquery/blob/master/osquery/events/linux/syslog.cpp#L173, which is informed via https://github.com/facebook/osquery/blob/master/osquery/events/linux/syslog.cpp#L187-L213