# history
    1  wget
    2  cd ~
    3  pwd
    4  wget <https://osquery-packages.s3.amazonaws.com/centos6/osquery-2.2.1-1.el6.x86_64.rpm>
    5  ls -al
    6  rpm -i osquery-2.2.1-1.el6.x86_64.rpm
    7  cd /etc/osquery/
    8  ls -al
    9  osqueryi

# osqueryi
osquery> select * from users join shell_history using (uid);
osquery>