I guess it will never exist. Sad. If I’m using osquery to collect windows event logs, then I have to also use something like filebeat to collect other logs, instead on maintaining both filebeat and osquery it may well be better to remove osquery and just use filebeat which is what I was trying to avoid. https://github.com/osquery/osquery/issues/7164