has anyone played around with making osquery a syslog forwarder to aws at high volume? eg, instead of using fluentd/logstash/etc to collect syslog, just shipping to a collector with osquery on it and letting osquery handle?