osquery.conf

{
  "decorators": {
      "load": [
        "SELECT uuid AS host_uuid FROM system_info;",
        "SELECT hostname AS hostname FROM system_info;"
      ]
    },
  "options": {
    "logger_plugin": "gcs",
    "host_identifier": "hostname",
    "pack_delimiter": "/",
    "schedule_splay_percent": 10
  },
  "packs": {
    "server_windows": {
      "queries": {
        "agn_time-query": {
          "query": "select * from time;",
          "interval": 1,
          "platform": ""
        }
      }
    }
  }
}