osquery operates on a single host. Generally, people either use a fleet manager, or do log aggregation in a SIEM style tool.