Now I changed to "snapshot": true with "interval" ...
# general
g
Now I changed to "snapshot": true with "interval" : 1 to see the effect. Still I dont see the log. However I restarted osqueryd.