~# osqueryi --config_path=/etc/osquery/osquery.conf -- flagfile=/etc/osquery/osquery.flags I1209 122837.816455 13238 events.cpp:825] Event publisher not enabled: audit: Could not set audit PID I1209 122837.816648 13238 events.cpp:825] Event publisher not enabled: syslog: Publisher disabled via configura tion W1209 122837.817482 13238 audit.cpp:281] Cannot add audit rule: syscall=59 filter=‘’: error -17 W1209 122837.817637 13238 audit.cpp:281] Cannot add audit rule: syscall=49 filter=‘’: error -17 W1209 122837.817739 13238 audit.cpp:281] Cannot add audit rule: syscall=42 filter=‘’: error -17