@Mike Myers so like I have been following this way : Creating osquery.conf file, adding in osquery.flags, creating file (test) then running commands to start osqueryd: systemctl start osqueryd upon running command to check status - systemctl status osqueryd But in here I am getting this same issue How to resolve this log_result_events error.. now CPU utilization is also added..