Typically you would not do so, but you can shut do...
# general
z
Typically you would not do so, but you can shut down
osqueryd
and have
osqueryi
connect to the events database if you want to be able to explore the events that are stored.