{
  "options": {
    "config_plugin": "filesystem",
    "logger_plugin": "filesystem",
    "logger_path": "/var/logs/osquery",
    "pidfile": "/etc/osquery/osquery.pidfile",
    "disable_events": false
  },
  "schedule": {
    "crontab": {
      "query": "SELECT * FROM crontab;",
      "interval": 5
    },
    "file_events": {
      "query": "SELECT * FROM file_events;",
      "interval": 5
    }
  },
  "file_paths": {
    "default_list": [
      "/etc/%%"
    ]
  }
}