<https://github.com/facebook/osquery/pull/5335> I ...
# general
u
https://github.com/facebook/osquery/pull/5335 I test this pr ,this pr does not fix osquery disk overuse,.I think the root cause is that the osquery just delete the records.auditeventpublisher.socket_events but not data.auditeventpublisher.socket_events. Does anybody can answer it?
Does anybody konw it?