Can you try 1.8.1? A 1.8.0 regression in choosing config paths may be the culprit: https://github.com/facebook/osquery/releases/tag/1.8.1