/etc/osquery/osquery.conf

{
  "options": {
    "config_plugin": "filesystem",
    "logger_plugin": "filesystem",
    "utc": "true",
    "disable_audit": "true",
    "disable_events": "true"
  },
... other stuff ...