@YehonatanShami Based on what I am seeing in their docs (https://documentation.wazuh.com/3.x/user-manual/capabilities/osquery.html), it looks like all Wazuh does is ship (existing) osquery logs from the endpoint to the Wazuh management server (for alerting, etc). The fleet managers mentioned in the above article do quite a bit more than that including osquery configuration management, live querying, etc