@lvferdi the osquery WEL pluggin writes to Applications/Facebook I believe?

I did what I tell people all the time and RTFM and found:

To verify that everything has been configured correctly, open the Event Viewer and search for the osquery folder under Applications and Services Logs/Facebook/osquery.