<@U0JFM04MS> : ``` osquery&gt; SELECT count(*) FR...
# core
j
@zwass :
Copy code
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431915 and time >= 1477431915-300;
+----------+
| count(*) |
+----------+
| 2361     |
+----------+
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431615 and time >= 1477431615-300;
+----------+
| count(*) |
+----------+
| 2444     |
+----------+
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431315 and time >= 1477431315-300;
+----------+
| count(*) |
+----------+
| 2449     |
+----------+
osquery> SELECT count(*) FROM syslog WHERE time <= 1477431015 and time >= 1477431015-300;
+----------+
| count(*) |
+----------+
| 2452     |
+—————+