@saeed.meethal those are just informative messages indicating that events are not currently enabled, there's quite a bit of documentation on our readthedocs for configuring and using this feature here: https://osquery.readthedocs.io/en/stable/development/pubsub-framework/