I'm not thinking about space, which I don't consider impacts the machine's performance given the size of what Osquery saves. I'm thinking about IOPS and throughput because I think those can interfere with users or carry costs on production servers. I think it shall work as the CPU limit, but I don't have strong feelings about it. Probably it would be beneficial to shine a light on it.