Skip to main content

Supported capabilities

Manual log source
  • Manual log source: osquery — Ship osquery scheduled query results and osqueryd status logs from Linux and macOS hosts to Sazabi through an OpenTelemetry Collector or Fluent Bit.
Each connection method has its own setup and permissions. Connecting one method does not enable the others.

About

Use osquery with Sazabi through manual log source capabilities. Choose a supported capability above to see its credentials, permissions, setup instructions, and verification steps. Each method is configured separately.