I think osquery does not start the events system when you provide a query in the program arguments.