Previously we were able to do legit queries using ASL, now we'll have to switch to an event based system like we do for linux syslog.