Jonathan H
12/08/2022, 12:28 AMMike Myers
12/08/2022, 7:02 AMWhen(from wiki, Deployment/Logging)changes, counter will be reset back toepoch
.0
Jonathan H
12/08/2022, 2:10 PMMike Myers
12/08/2022, 4:29 PMepoch
is that it is how osquery knows the last time event results were gathered, so that it doesn't re-collect events older than that timestamp.Jonathan H
12/08/2022, 7:10 PM