About how hard is it to configure osquery to simply report file changes + commands being run on the host to ELK?