Depends a bit on the site, but you could run osqueryd as a service, and using a fleet manager. Or standalone with the configs distributed out