@Mike Myers so is this like we can either add these commands: --enable_file_events=true --disable_events=false into osqueryi as done above or add them into osquery.flag file ...?