hm, according to docs - osqueryd.INFO is a symlink to the most recent execution's INFO log. which contains date even in example https://osquery.readthedocs.io/en/latest/deployment/logging/