OSQuery

Subordinate charm for the osquery endpoint security monitoring agent.

A subordinate machine charm that deploys and manages the Canonical SecOps fork of osquery for endpoint security monitoring.

The charm installs osquery from the c-osquery snap (classic confinement) and runs osquery in daemon mode.

osquery opens an outbound TLS connection to a centrally managed osquery Controller to fetch its configuration (schedules, telemetry rules and query tasks) and to push the logs produced by its scheduled queries.