Hi Team, I am running osquery "select * from windows_events" and it gives me error

Table windows_events is event-based but events are disabled

I then used --disable_events=0 as said in this doc https://osquery.readthedocs.io/en/stable/deployment/debugging/ but got the same error. Any thoughts?

you may need to enable windows events: https://osquery.readthedocs.io/en/stable/installation/cli-flags/#windows-only-events-control-flags