on the host, if you stop `osqueryd` then `sudo osq...
# generalt
theopolis
11/16/2016, 11:59 PM
on the host, if you stop
osquerydsudo osqueryi --database_path /var/osquery/osquery.db --database_dump | grep hardware_events