[Security] Osquery UI refactor and functionality changes

[natasha-moore-elastic]

Summary

Resolves #5512 by updating the Osquery docs to reflect the UI refactor and functionality changes.

Generative AI disclosure

1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?

• Yes
• No

Cursor

[github-actions]

🔍 Preview links for changed docs

• solutions/security/investigate/osquery.md

[github-actions]

✅ Vale Linting Results

No issues found on modified lines!

---

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

[raqueltabuyo]

@natasha-moore-elastic I think there are some small things to be fixed by @tomsonpl, in that case, let's wait if he can fix them on time and if not, I will approve this. As there are few things where the screenshots and the docs should change:

• "Save for later" button should be removed and replaced with "Save query" in the results page
• The code appearing in the new live query dropdown should be removed and will only appear when selecting the query.
• "Run by" should show Elastic if it is scheduled or the name of the person if it is live

[tomsonpl]

LGTM! Great work! Thank you :)

[raqueltabuyo]

hey @tomsonpl is this finally going to be able to be changed? If so, a new screenshot should be taken as the one below would be old @natasha-moore-elastic

[tomsonpl]

Hey, it's been addressed already by @szwarckonrad , we should be able to merge this still today. @natasha-moore-elastic could you use the screenshot provided in the PR elastic/kibana#261394 ? Or do we need another one?

[natasha-moore-elastic]

Hey, it's been addressed already by @szwarckonrad , we should be able to merge this still today. @natasha-moore-elastic could you use the screenshot provided in the PR elastic/kibana#261394 ? Or do we need another one?

The screenshot from the dev PR should be good, thanks! I'll make the update.

[raqueltabuyo]

All good!! Thanks for all the changes and sorry for going back and forth