Hello, am trying to enable Process_file_events table. Updated below config in osquery.flag in host and query returns 0 values
--disable_events=false
--disable_audit=false
--enable_file_events=true
--audit_allow_config=true
--audit_allow_fim_events=true
--audit_allow_process_events=true
--audit_persist=true
--enable_bpf_events=true
Updated the same config in fleetdm Global config still same result.