@absolutejam osquery has APIs built in to support distributed "live" queries, but it always requires some central server to manage things. Take a look at Kolide, Doorman, etc. for other examples.