A method where we build policies within the portal (modules and their configurations) assign them to relevant shippers and its pulled down. No more manual changes to the auditbeat config files and such.
Also adding tamper protection check boxes in the portal to make uninstall very difficult.