osquery> select * from file_events;
W0913 16:20:09.899874  7649 virtual_table.cpp:508] Table file_events is event-based but events are disabled
W0913 16:20:09.899981  7649 virtual_table.cpp:515] Please see the table documentation: <https://osquery.io/docs/#file_events>
osquery> select name, publisher, type, subscriptions, events, active from osquery_events;
+-----------------+-----------+------------+---------------+--------+--------+
| name            | publisher | type       | subscriptions | events | active |
+-----------------+-----------+------------+---------------+--------+--------+
| audit           | audit     | publisher  | 0             | 0      | 0      |
| inotify         | inotify   | publisher  | 0             | 0      | 0      |
| kernel          | kernel    | publisher  | 0             | 0      | 0      |
| syslog          | syslog    | publisher  | 0             | 0      | 0      |
| udev            | udev      | publisher  | 0             | 0      | 0      |
| file_events     | inotify   | subscriber | 0             | 0      | 0      |
| hardware_events | udev      | subscriber | 0             | 0      | 0      |
| process_events  | audit     | subscriber | 0             | 0      | 0      |
| socket_events   | audit     | subscriber | 0             | 0      | 0      |
| syslog          | syslog    | subscriber | 0             | 0      | 0      |
| user_events     | audit     | subscriber | 0             | 0      | 0      |
| yara_events     | inotify   | subscriber | 0             | 0      | 0      |
+-----------------+-----------+------------+---------------+--------+--------+`