When I run auditctl -s, I DO NOT see the pid of os...
# general
c
When I run auditctl -s, I DO NOT see the pid of osquery listed: enabled 0 failure 1 pid 1016 rate_limit 0 backlog_limit 0 lost 0 backlog 0 backlog_wait_time 60000 loginuid_immutable 0 unlocked