https://blog.gopheracademy.com/advent-2017/osquery-sdk/ An example I use there is journald as a logger. you can change that to become a pubsub publisher instead