{}

command_line_flags: {}
  enable_file_events: true

command_line_flags:
  enable_file_events: true

config:
  options:
    pack_delimiter: /
    logger_tls_period: 10
    distributed_plugin: tls
    disable_distributed: false
    logger_tls_endpoint: /api/osquery/log
    distributed_interval: 10
    distributed_tls_max_attempts: 3
  decorators:
    load:
      - SELECT version FROM osquery_info
      - SELECT uuid AS host_uuid FROM system_info
    always:
      - >-
        SELECT user AS username FROM logged_in_users WHERE user <> '' ORDER BY
        time LIMIT 1
command_line_flags:
  events_max: 500000
  audit_persist: true
  disable_audit: false
  events_expiry: 1
  disable_events: false
  audit_allow_config: true
  enable_file_events: true
  logger_rotate_size: 26214400
  audit_allow_sockets: true
  watchdog_memory_limit: 150
  logger_rotate_max_files: 5
  audit_allow_process_events: true
  watchdog_utilization_limit: 130