vectordotdev
Add an osquery source to Vector
osquery is a host monitoring daemon that enables you to "query your devices like a database," in the words of its website. It essentially keeps up-to-date information about a broad range of system attributes (disk usage, running processes, memory usage, and much more) that can be externally queried using SQL. A Vector source for osquery would conceivably allow for running SQL queries against osquery tables at a specified time interval. Queries can be local (agent role) or remote/distributed (aggregator role).
A feature like this is currently in the "daydream" category as it's unclear how osquery's SQL-driven data model could fit into traditional logs and metrics. But this could be a domain that sees solid growth in the near- to medium-term future and thus may be worth preliminary exploration.
