{

"options": {

"disable_events": "false"

},

"schedule": {

"file_events": {

"query": "SELECT * FROM file_events;",

"interval": 20

}

},

"file_paths": {

"etc": [

"/etc/%%"

]

},

"exclude_paths": {

"etc": [

"/etc/aliases"

]

}

}