so essentially the only change needed is updating ...
# core
t
so essentially the only change needed is updating OS X from
/usr/share/osquery
to
/var/osquery
.