There are a few known issues, if you are affected by one of these: https://osquery.readthedocs.io/en/latest/deployment/file-integrity-monitoring/#known-issues