capabilities.work

Run a live osquery query on hosts

One step with Elastic Stack. We can help you get access.

Get something done

Run a live osquery query on hosts

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Osquery API lets you run a live osquery query on hosts in a single step (POST /api/osquery/live_queries). capabilities.work can help you get signed up and connected.

  • How do I run an osquery SQL query on my endpoints right now?
  • Can I target a live query at a specific agent policy or platform?
  • Is it possible to run a saved query or a whole pack as a live query?
Say it to your AI assistant
  • Run live query {query} on agents {agent_ids}.
  • Run live query {query} on every agent in policies {agent_policy_ids}.
  • Launch saved query {saved_query_id} live on all {agent_platforms} hosts.
For your developer

POST /api/osquery/live_queries in Kibana Security Osquery API. Full spec on APIs.io.