Update osquery.asciidoc (#126712)

* Update osquery.asciidoc

Add a note about the requirement that the Osquery Manager integration does not work for Elastic Agents in standalone mode.

* Update docs/osquery/osquery.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
This commit is contained in:
Melissa Burpo 2022-03-03 12:56:11 -06:00 committed by GitHub
parent e1ac9398d3
commit 15b6f8ec11
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -273,12 +273,18 @@ for an agent policy through Fleet.
This integration supports x64 architecture on Windows, MacOS, and Linux platforms,
and ARM64 architecture on Linux.
NOTE: The original {filebeat-ref}/filebeat-module-osquery.html[Filebeat Osquery module]
[NOTE]
=========================
* The original {filebeat-ref}/filebeat-module-osquery.html[Filebeat Osquery module]
and the https://docs.elastic.co/en/integrations/osquery[Osquery]
integration collect logs from self-managed Osquery deployments.
The *Osquery Manager* integration manages Osquery deployments
and supports running and scheduling queries from {kib}.
* *Osquery Manager* cannot be integrated with an Elastic Agent in standalone mode.
=========================
[float]
=== Customize Osquery sub-feature privileges