@finid you can safely ignore the line about

/dev/osquery

on Linux, we'll get that fixed up as discussed 🙂 for the

syslog

table check out: http://osquery.readthedocs.io/en/stable/deployment/syslog/