Armen Tashjian
05/29/2019, 10:32 PMosqueryi --pack execution feed directly to a kinesis stream defined in my osquery.conf, i.e. osqueryi --pack <pack> --output aws_kinesis or something like that. From what I can see, the only way to get something to feed aws_kineses (or any logger_plugin) is to use scheduled queries/packs