@p2 from what I see here we have an issue with the setup https://github.com/facebook/osquery/blob/master/osquery/events/events.cpp#L822