osquery can log to syslog, if you can send the sys...
# general
a
osquery can log to syslog, if you can send the syslog to arcsight you can use that