question about the

process_events

table (and other _events tables): if the tables are generally empty when using the

osqueryi

shell, what would be some approaches toward generating events for testing queries against?