https://github.com/osquery/osquery logo
c

Cuong Bui

05/15/2021, 3:49 AM
can we send directly osquery log to destination tcp port (logstash)?
j

javuto

05/16/2021, 11:22 AM
I don’t think is possible. Traditionally if you wanted to use logstash to forward logs, you would have osquery to log locally, and the logstash agent would pick those up
You can find some information about it in the osquery wiki: https://osquery.readthedocs.io/en/stable/deployment/log-aggregation/#logstash
4 Views