ok so moved the files and same as earlier ... osquery started up fine (but still showing that error) but rsyslog didn't