jacknagz
osquery> SELECT count(*) FROM syslog WHERE time >= 1477430115 and time <= 1477430115+300; +----------+ | count(*) | +----------+ | 2456 | +—————+