$ sudo osqueryi --enable_syslog --disable_events=false --verbose --syslog_pipe_path=<snip> --database_path=<snip>
I0310 23:53:07.382062 31229 init.cpp:364] osquery initialized [version=2.2.1]
I0310 23:53:07.382208 31229 extensions.cpp:275] Could not autoload extensions: Failed reading: /etc/osquery/extensions.load
I0310 23:53:07.382241 31229 extensions.cpp:288] Could not autoload modules: Failed reading: /etc/osquery/modules.load
I0310 23:53:07.382318 31229 rocksdb.cpp:195] Opening RocksDB handle: /var/osquery/osquery.db
I0310 23:53:07.405830 31231 interface.cpp:307] Extension manager service starting: /home/<snip>/.osquery/shell.em
W0310 23:53:08.050801 31229 events.cpp:282] Expiring events for subscriber: syslog (limit 100000)
Using a virtual database. Need help, type '.help'
osquery> W0310 23:53:08.729081 31234 events.cpp:282] Expiring events for subscriber: syslog (limit 100000)
         select count(*) from syslog;
+----------+
| count(*) |
+----------+
| 2081     |
+----------+