Pinging folks again, in case someone missed my message. I was wondering, if anyone uses primary logger concept(logger_secondary_status_only flag) or the event forwarding(For this one, I also wonder how you solve scaling problems and why table abstraction was not appropriate for your use case) . Feel free to ping me with your use case, as I'm currently considering removing those features.
https://github.com/facebook/osquery/pull/4745