so you could get the last 5 seconds of the stream every 5 se osquery #general

so you could get the last 5 seconds of the stream ...

marpaia

11/21/2016, 8:28 PM

so you could get the last 5 seconds of the stream every 5 seconds by setting the interval of a query to

process_events

to 5, etc