osquery> SELECT COUNT(*) FROM syslog WHERE time...
# corec
coffee
10/25/2016, 6:58 PMosquery> SELECT COUNT(*) FROM syslog WHERE time < 1477420845 AND time > 1477420845-3600;
+----------+
| COUNT(*) |
+----------+
| 8548 |
+—————+
coffee
10/25/2016, 6:58 PM