View combined osquery execution history
One step with Elastic Stack. We can help you get access.
Look something up
View combined osquery execution history
with Elastic Stack · Threat Detection & Response Management
Use Elastic Stack: its Kibana Security Osquery API lets you view combined osquery execution history in a single step (GET /api/osquery/history). capabilities.work can help you get signed up and connected.
- Can I see live, rule-triggered and scheduled osquery runs in one timeline?
- Which osquery executions ran between two dates?
- Is it possible to filter osquery history to queries a specific user ran?
Say it to your AI assistant
- Show my unified osquery history from {startDate} to {endDate}.
- List osquery executions run by users {userIds}.
- Get the next page of osquery history using cursor {nextPage}.
For your developer
GET /api/osquery/history in Kibana Security Osquery API. Full spec on APIs.io.