yeah, been using this ```"shell_history": {
...
# generalc
clippy
05/04/2017, 6:41 PMyeah, been using this
Copy code
"shell_history": {
"query": "select * from users join shell_history using (uid);",
"description": "pulls all shell history from all users, not just current osquery user",
"interval": 300
},