W0311 00:18:00.256119  2678 events.cpp:282] Expiring events for subscriber: syslog (limit 100000)
Using a virtual database. Need help, type '.help'
osquery>