You can do much more than just forwarding logs with a remote server, full documentation is here https://osquery.readthedocs.io/en/stable/deployment/remote/