@John Gomez What you are describing is an osquery fleet manager. There are a number of open source and paid offerings which will allow you to run distributed queries or scheduled packs against multiple devices simultaneously and aggregate those results.
FleetDM (self-hosted & SaaS versions)
Kolide
Uptycs
CB LiveOps
osctrl
There's probably others that I'm not thinking of, but that's a good few to look into.
j
John Gomez
01/31/2021, 6:55 PM
Thank you truly appreciated - will check this out!!!