sudo grep zwass /var/log/osquery/osqueryd.results....
# general
j
sudo grep zwass /var/log/osquery/osqueryd.results.log | cut -d ";" -f 4 | grep echo | cut -d "," -f 1 | cut -d " " -f 3 | cut -d '"' -f 1