osqueryi --config_path fim_osquery.conf --disable_audit=false --audit_allow_fim_events --audit_allow_user_events --database_path ./osquery.db --disable_events=false