I'm having issues with getting FIM enabled on an ubuntu box. I have installed the auditd package, but disabled it at startup. osquery starts and points to my config and flag files: root 972 1 0 20:45 ? 000000 /usr/bin/osqueryd --flagfile /etc/osquery/osquery.flags --config_path /etc/osquery/osquery.conf --disable_events=false --events_expiry=1 --events_optimize=true