What is an Elastic integration?

This integration is powered by Elastic Agent. Elastic Agent is a single, unified way to add monitoring for logs, metrics, and other types of data to a host. It can also protect hosts from security threats, query data from operating systems, forward data from remote services or hardware, and more. Refer to our documentation for a detailed comparison between Beats and Elastic Agent.

Prefer to use Beats for this use case? See Filebeat modules for logs or Metricbeat modules for metrics.

The custom TCP Log package intializes a listening TCP socket that collects any TCP traffic received and sends each line as a document to Elasticsearch. Custom ingest pipelines may be added by adding the name to the pipeline configuration option, creating custom ingest pipelines can be done either through the API or the Ingest Node Pipeline UI.

Changelog

VersionDetails
1.5.0
Enhancement View pull request
Update package to ECS 8.5.0.
1.4.1
Bug fix View pull request
Fix indentation of syslog processor in agent handlebars file.
1.4.0
Enhancement View pull request
Update package to ECS 8.4.0
1.3.1
Enhancement View pull request
Improve syslog parsing description
1.3.0
Enhancement View pull request
Add syslog parsing option
1.2.0
Enhancement View pull request
Update package to ECS 8.3.0.
1.1.0
Enhancement View pull request
Update to ECS 8.2
1.0.0
Enhancement View pull request
Initial Release