Hello everyone. I am pretty new to osquery 🙂 currently looking at setting up basic FIM and logging to aws firehose but I cannot make it work. AWS keys have right permissions to push to firehose (tested) but there is no sign of logs on S3. I am running osquery version 3.3.2 on Ubuntu Bionic. Redacted config I am using is as follows:

{
  "options ": {
    "host_identifier": "ec2name",
    "schedule_splay_percent": 10,
    "logger_plugin": "aws_firehose",
    "aws_firehose_period": 10,
    "aws_firehose_stream": "REDACTED",
    "aws_access_key_id": "REDACTED",
    "aws_secret_access_key": "REDACTED",
    "aws_region": "REDACTED"
  },
  "schedule": {
    "file_events": {
      "query": "SELECT * FROM file_events;",
      "removed": false,
      "interval": 30
    }
  },
  "file_paths": {
    "tmp": [
      "/tmp/%%"
    ]
  }
}

On the verbose logs I cannot see any reference to AWS firehose. Any ideas of what I am missing? Thanks for the help