Bit
04/30/2020, 5:20 PMosquery> select * from osquery_events;
+---------------------+---------------------+------------+---------------+--------+-----------+--------+
| name | publisher | type | subscriptions | events | refreshes | active |
+---------------------+---------------------+------------+---------------+--------+-----------+--------+
| auditeventpublisher | auditeventpublisher | publisher | 3 | 0 | 24 | 1 |
| inotify | inotify | publisher | 0 | 0 | 24 | 1 |
| syslog | syslog | publisher | 1 | 0 | 0 | 0 |
| udev | udev | publisher | 1 | 0 | 24 | 1 |
| file_events | inotify | subscriber | 0 | 0 | 0 | 1 |
| hardware_events | udev | subscriber | 1 | 0 | 0 | 1 |
| process_events | auditeventpublisher | subscriber | 1 | 0 | 0 | 1 |
| process_file_events | auditeventpublisher | subscriber | 0 | 0 | 0 | 0 |
| selinux_events | auditeventpublisher | subscriber | 0 | 0 | 0 | 0 |
| socket_events | auditeventpublisher | subscriber | 1 | 0 | 0 | 1 |
| syslog_events | syslog | subscriber | 1 | 0 | 0 | 1 |
| user_events | auditeventpublisher | subscriber | 1 | 0 | 0 | 1 |
| yara_events | inotify | subscriber | 0 | 0 | 0 | 1 |
+---------------------+---------------------+------------+---------------+--------+-----------+--------+