You could also try having osqueryi connect to the DB and querying to see if the logs are actually in it. May want to increase the expiry and max first so that the relevant logs wouldn't have expired when you go for that.