"Do you think osquery is a good fit for what I describe above?" Absolutely!! Osquery is the right tool to get a unified yet detailed view of your servers' health, compliance, vulnerability, threats etc. "How do you handle logs and alerts?" Osquery by design is very flexible and plauggable. Various logging and alerting options are available in the osquery echosystem "What is your experience with osquery for docker containers?" Osquery has various tables around docker containers and solves various use-cases in that area. "Anything you think I should know? Like common pitfalls, good readings/presentations etc" Our team at Uptycs (www.uptycs.com) has put together a free online osquery class with exact purpose of getting users started with osquery. You can find it here: https://www.uptycs.com/free-osquery-training-intro-to-osquery