@finid are you using process auditing on Linux? That warning is usually caused when the audit rule osquery needs already exists.