Hi all,
I was starting to explore attaching the output from osquery/Fleet to ELK, and was working through this guide: https://jordanpotti.com/2018/02/16/elk-osquery-kolide-fleet-love/
Unfortunately it seems a bit out of date so the results I’m getting aren’t quite right. I don’t suppose anyone has explored this more recently and could point me in the right direction?