I need a centralized logging, but also the possibility to run query on definided groups (AD or unix groups) of hosts