jacknagz
10/25/2016, 9:53 PMosquery> SELECT count(*) FROM syslog WHERE time <= 1477431915 and time >= 1477431915-300;
+----------+
| count(*) |
+----------+
| 2361 |
+----------+
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431615 and time >= 1477431615-300;
+----------+
| count(*) |
+----------+
| 2444 |
+----------+
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431315 and time >= 1477431315-300;
+----------+
| count(*) |
+----------+
| 2449 |
+----------+
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431015 and time >= 1477431015-300;
+----------+
| count(*) |
+----------+
| 2452 |
+—————+