These are the queries contained in the pack that does seem to have counter properly incrementing:

select name, publisher, type, subscriptions, events, active from osquery_events;

select i.*, p.resident_size, p.user_time, p.system_time, time.minutes as counter from osquery_info i, processes p, time where p.pid = i.pid;

select name, interval, executions, output_size, wall_time, (user_time/executions) as avg_user_time, (system_time/executions) as avg_system_time, average_memory, last_executed from osquery_schedule;

select osquery.version from osquery_info osquery;

(this one is a snapshot so no diff) The other pack always has both epoch and counter set to 0. This is the only query it contains:

SELECT * FROM crontab

My fleetdm version is 3.6.0 My osqueryd version is 3.2.6 Let me know if there are any other details I can provide that would be helpful. Sorry I've been asking so many questions lately, my goal is to start contributing to this project but I've never contributed to open source before 🙂