{
 "options": {
    "host_identifier": "hostname",
    "config_plugin": "filesystem",
    "logger_plugin": "filesystem",
    "logger_path": "/var/log/osquery",
    "disable_logging": "false",
    "schedule_splay_percent": 10
 },
 "schedule": {
    "osquery_profile": {
        "query": "SELECT * FROM osquery_info;",
        "interval": 60
    }
 },
 "packs": {
    "ossec-rootkit": "/usr/share/osquery/packs/ossec-rootkit.conf",
    "it_compliance": "/usr/share/osquery/packs/it-compliance.conf",
    "incident_response": "/usr/share/osquery/packs/incident-response.conf"
 }
}