below is a screenshot of the commands i ran, and the top is a screenshot of all the events that osquery is reporting to elk via filebeat