One of the things I've been looking forward to doing at some point is to write an

osquery-beat

similar to filebeat