@theopolis that would be much appreciated. currently there does not seem to be a way to troubleshoot even permission problems without turning osqueryd off.