seems like the osquery output module would need slight modifications to make POST params match up, but seems possible. Although, a native plugin using the lumberjack protocol would be hot.