---
title: Charmhub | Deploy OSQuery using Charmhub - The Open Operator Collection
description: Deploy the latest version of OSQuery on any cloud. Subordinate charm
  for the OSQuery endpoint security monitoring agent.
url: https://charmhub.io/osquery
---

# OSQuery

[Platform Engineering Team](https://charmhub.io/publisher/platform-engineering-group "View all packages from Platform Engineering Team")

* [Platform Engineering Team](https://charmhub.io/publisher/platform-engineering-group "View all packages from Platform Engineering Team")

Platform:

26.04

24.04

22.04

edge 35c895a7

```
juju deploy osquery --channel edge
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

[Read documentation](https://canonical.com/juju/docs/osquery-charm)

#### Contacts

* [Submit a bug](https://github.com/canonical/osquery-operator/issues)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

#### Subordinate charm for the osquery endpoint security monitoring agent.

A subordinate machine charm that deploys and manages the Canonical SecOps
fork of osquery for endpoint security monitoring.

The charm installs osquery from the `c-osquery` snap (classic confinement)
and runs osquery in daemon mode.

osquery opens an outbound TLS connection to a centrally managed osquery
Controller to fetch its configuration (schedules, telemetry rules and query
tasks) and to push the logs produced by its scheduled queries.