@Mustafa I think what you're experiencing there might be the difference between running osqueryi as root or just as "some current user"