{ "options": { "host_identifier": "hostname", "config_plugin": "filesystem", "logger_plugin": "filesystem", "logger_path": "/var/log/osquery", "disable_logging": "false", "schedule_splay_percent": 10 }, "schedule": { "osquery_profile": { "query": "SELECT * FROM osquery_info;", "interval": 60 } }, "packs": { "ossec-rootkit": "/usr/share/osquery/packs/ossec-rootkit.conf", "it_compliance": "/usr/share/osquery/packs/it-compliance.conf", "incident_response": "/usr/share/osquery/packs/incident-response.conf" } }