1.4.7

New features in 1.4.7:

Note: this is a minor update!

#1212 A new logger plugin: syslog (use --logger_plugin=syslog, see #1207)
#1224 Support for SQLite's DOUBLE type

Bug fixes:

#1202 osqueryd workers could \0-out their argv, not friendly
#1205 Average memory reporting in schedule monitor mode does not wrap
#1224 Fix OS X package_receipts reporting installed time as a DOUBLE
#1224 Fix check of extensions_socket in the shell

Config options / CLI flags changes:

--logger_syslog_facility when using the --logger_plugin=syslog set a specific facility (0-23, default 19)

Table changes (from 1.4.6 to 1.4.7):

Added table app_schemes to Darwin (Apple OS X)
Added table keychain_acls to Darwin (Apple OS X)
Added table sandboxes to Darwin (Apple OS X)