Run a live osquery query on hosts
One step with Elastic Stack. We can help you get access.
Get something done
Run a live osquery query on hosts
with Elastic Stack · Threat Detection & Response Management
Use Elastic Stack: its Kibana Security Osquery API lets you run a live osquery query on hosts in a single step (POST /api/osquery/live_queries). capabilities.work can help you get signed up and connected.
- How do I run an osquery SQL query on my endpoints right now?
- Can I target a live query at a specific agent policy or platform?
- Is it possible to run a saved query or a whole pack as a live query?
Say it to your AI assistant
- Run live query {query} on agents {agent_ids}.
- Run live query {query} on every agent in policies {agent_policy_ids}.
- Launch saved query {saved_query_id} live on all {agent_platforms} hosts.
For your developer
POST /api/osquery/live_queries in Kibana Security Osquery API. Full spec on APIs.io.