{
  "options": {
    "config_plugin": "filesystem",
    "logger_plugin": "filesystem",
    "schedule_splay_percent": 10,
    "events_expiry": 3600,
    "verbose": false,
    "worker_threads": 2,
    "enable_monitor": false,
    "host_identifier": "hostname",
    "logger_path": "/var/log/osquery"
  },
  "schedule": {
    "hosts_file": {
      "query": "select * from etc_hosts;",
      "interval": 300
    },
  },
  "packs": {
    "osx-attacks": "/var/osquery/packs/osx-attacks.conf",
    "osquery-monitoring": "/var/osquery/packs/osquery-monitoring.conf"
  }
}