without using logstash or some aggregation technique?: https://osquery.readthedocs.io/en/latest/deployment/log-aggregation/#logstash