That is another table though, which Audit based vs INotify

I understand. But Why the select * from file_events is totally blank

https://osquery.slack.com/archives/C08V7KTJB/p1608756745376000?thread_ts=1608753932.375100&cid=C08V7KTJB is this relevant?

Perfect @Stefano Bonicatti. I ran osqueryi and now I can see the records. tks.