The intent of this table is to watch for changes but that watch starts at the point you start osquery.

Originally the INotify based publisher was automatically active as soon as one enabled events, but now, like the other publishers, it has its own flag to enable that.

I think osquery would report

Subscriber disabled via configuration

for

file_events

if this were 4.6.0