I managed something that should work for most osquery inputs I think https://play.golang.org/p/fekWsBCXeM