@Jordan I've seen a few folks ask this, it seems the Kafka documentation needs more: http://osquery.readthedocs.io/en/stable/deployment/logging/#logging-as-a-kafka-producer