We are replacing our monitoring tool of many years by elastic and I have the need to check the updates of the monitored systems, so I thought of using osquery to perform this task, my question is, is that possible with osquery?
10/19/2022, 4:14 AM
Depends on what you mean by checking for updates. osquery can be thought of as an API translation layer. There is breakdown of the data it can read at https://osquery.io/schema