I’m not sure it would work as a logging plugin. You could do it as an extension. Take sql in, relay to osquery, hand results back.