@pvirani yeah definitely. are you meaning for your full deployment? it might be worth it just for standing up rsyslog with osquery on macs