i'm trying to do the most simple thing in osquery and just unable to succeed it