@Rinshad K Asharaf

--disable_events=false

is just to enable the events subsystem, then you have to enable the specific event source (or event publisher) and sometimes the event subscriber. From the query you have there It seems you want to enable FIM, have a look at: https://osquery.readthedocs.io/en/latest/deployment/file-integrity-monitoring/