is your config in /etc/osquery/osquery.conf?