so essentially if I do ` events expiry=1` the buffer only st osquery #macos

so essentially if I do `--events_expiry=1` the buf...

j

jackjack

07/31/2018, 3:24 PM

so essentially if I do

--events_expiry=1

the buffer only stores 1 second for the events