Please note that generating new Beats is deprecated since 7.16.
The open source community has been hard at work developing new Beats. You can check out some of them here.
Have a question about developing a community Beat? You can post questions and discuss issues in the Beats discussion forum.
Have you created a Beat that’s not listed? Add the name and description of your Beat to the source document for Community Beats and open a pull request in the Beats GitHub repository to get your change merged. When you’re ready, go ahead and announce your new Beat in the Elastic discussion forum.
Want to contribute? See [contributing-to-beats].
|
Note
|
Elastic provides no warranty or support for community-sourced Beats. |
| amazonbeat |
Reads data from a specified Amazon product. |
| apachebeat |
Reads status from Apache HTTPD server-status. |
| apexbeat |
Extracts configurable contextual data and metrics from Java applications via the APEX toolkit. |
| browserbeat |
Reads and ships browser history (Chrome, Firefox, & Safari) to an Elastic output. |
| cborbeat |
Reads from cbor encoded files (specifically log files). More: CBOR Encoding Decoder |
| cloudflarebeat |
Indexes log entries from the Cloudflare Enterprise Log Share API. |
| cloudfrontbeat |
Reads log events from Amazon Web Services CloudFront. |
| cloudtrailbeat |
Reads events from Amazon Web Services' CloudTrail. |
| cloudwatchmetricbeat |
A beat for Amazon Web Services' CloudWatch Metrics. |
| cloudwatchlogsbeat |
Reads log events from Amazon Web Services' CloudWatch Logs. |
| collectbeat |
Adds discovery on top of Filebeat and Metricbeat in environments like Kubernetes. |
| connbeat |
Exposes metadata about TCP connections. |
| consulbeat |
Reads services health checks from consul and pushes them to Elastic. |
| discobeat |
Reads messages from Discord and indexes them in Elasticsearch |
| dockbeat |
Reads Docker container statistics and indexes them in Elasticsearch. |
| earthquakebeat |
Pulls data from USGS earthquake API. |
| elasticbeat |
Reads status from an Elasticsearch cluster and indexes them in Elasticsearch. |
| envoyproxybeat |
Reads stats from the Envoy Proxy and indexes them into Elasticsearch. |
| etcdbeat |
Reads stats from the Etcd v2 API and indexes them into Elasticsearch. |
| etherbeat |
Reads blocks from Ethereum compatible blockchain and indexes them into Elasticsearch. |
| execbeat |
Periodically executes shell commands and sends the standard output and standard error to Logstash or Elasticsearch. |
| factbeat |
Collects facts from Facter. |
| fastcombeat |
Periodically gather internet download speed from fast.com. |
| fileoccurencebeat |
Checks for file existence recurssively under a given directory, handy while handling queues/pipeline buffers. |
| flowbeat |
Collects, parses, and indexes sflow samples. |
| gabeat |
Collects data from Google Analytics Realtime API. |
| gcsbeat |
Reads data from Google Cloud Storage buckets. |
| gelfbeat |
Collects and parses GELF-encoded UDP messages. |
| githubbeat |
Easily monitors GitHub repository activity. |
| gpfsbeat |
Collects GPFS metric and quota information. |
| hackerbeat |
Indexes the top stories of HackerNews into an ElasticSearch instance. |
| hsbeat |
Reads all performance counters in Java HotSpot VM. |
| httpbeat |
Polls multiple HTTP(S) endpoints and sends the data to Logstash or Elasticsearch. Supports all HTTP methods and proxies. |
| hsnburrowbeat |
Monitors Kafka consumer lag for Burrow V1.0.0(API V3). |
| hwsensorsbeat |
Reads sensors information from OpenBSD. |
| icingabeat |
Icingabeat ships events and states from Icinga 2 to Elasticsearch or Logstash. |
| IIBBeat |
Periodically executes shell commands or batch commands to collect IBM Integration node, Integration server, app status, bar file deployment time and bar file location to Logstash or Elasticsearch. |
| iobeat |
Reads IO stats from /proc/diskstats on Linux. |
| jmxproxybeat |
Reads Tomcat JMX metrics exposed over 'JMX Proxy Servlet' to HTTP. |
| journalbeat |
Used for log shipping from systemd/journald based Linux systems. |
| kafkabeat |
Reads data from Kafka topics. |
| kafkabeat2 |
Reads data (json or plain) from Kafka topics. |
| krakenbeat |
Collect information on each transaction on the Kraken crypto platform. |
| lmsensorsbeat |
Collects data from lm-sensors (such as CPU temperatures, fan speeds, and voltages from i2c and smbus). |
| logstashbeat |
Collects data from Logstash monitoring API (v5 onwards) and indexes them in Elasticsearch. |
| macwifibeat |
Reads various indicators for a MacBook’s WiFi Signal Strength |
| mcqbeat |
Reads the status of queues from memcacheq. |
| merakibeat |
Collects wireless health and users location analytics data using Cisco Meraki APIs. |
| mesosbeat |
Reads stats from the Mesos API and indexes them into Elasticsearch. |
| mongobeat |
Monitors MongoDB instances and can be configured to send multiple document types to Elasticsearch. |
| mqttbeat |
Add messages from mqtt topics to Elasticsearch. |
| mysqlbeat |
Run any query on MySQL and send results to Elasticsearch. |
| nagioscheckbeat |
For Nagios checks and performance data. |
| natsbeat |
Collects data from NATS monitoring endpoints |
| netatmobeat |
Reads data from Netatmo weather station. |
| netbeat |
Reads configurable data from SNMP-enabled devices. |
| nginxbeat |
Reads status from Nginx. |
| nginxupstreambeat |
Reads upstream status from nginx upstream module. |
| nsqbeat |
Reads data from a NSQ topic. |
| nvidiagpubeat |
Uses nvidia-smi to grab metrics of NVIDIA GPUs. |
| o365beat |
Ships Office 365 logs from the O365 Management Activities API |
| openconfigbeat |
Streams data from OpenConfig-enabled network devices |
| openvpnbeat |
Collects OpenVPN connection metrics |
| owmbeat |
Open Weather Map beat to pull weather data from all around the world and store and visualize them in Elastic Stack |
| packagebeat |
Collects information about system packages from package managers. |
| perfstatbeat |
Collects performance metrics on the AIX operating system. |
| phishbeat |
Monitors Certificate Transparency logs for phishing and defamatory domains. |
| phpfpmbeat |
Reads status from PHP-FPM. |
| pingbeat |
Sends ICMP pings to a list of targets and stores the round trip time (RTT) in Elasticsearch. |
| powermaxbeat |
Collects performance metrics from Dell EMC PowerMax storage array. |
| processbeat |
Collects process health status and performance. |
| prombeat |
Indexes Prometheus metrics. |
| prometheusbeat |
Send Prometheus metrics to Elasticsearch via the remote write feature. |
| protologbeat |
Accepts structured and unstructured logs via UDP or TCP. Can also be used to receive syslog messages or GELF formatted messages. (To be used as a successor to udplogbeat) |
| pubsubbeat |
Reads data from Google Cloud Pub/Sub. |
| redditbeat |
Collects new Reddit Submissions of one or multiple Subreddits. |
| redisbeat |
Used for Redis monitoring. |
| retsbeat |
Collects counts of RETS resource/class records from Multiple Listing Service (MLS) servers. |
| rsbeat |
Ships redis slow logs to elasticsearch and analyze by Kibana. |
| safecastbeat |
Pulls data from Safecast API and store them in Elasticsearch. |
| saltbeat |
Reads events from salt master event bus. |
| serialbeat |
Reads from a serial device. |
| servicebeat |
Send services status to Elasticsearch |
| springbeat |
Collects health and metrics data from Spring Boot applications running with the actuator module. |
| springboot2beat |
Query and accumulate all metrics endpoints of a Spring Boot 2 web app via the web channel, leveraging the mircometer.io metrics facade. |
| statsdbeat |
Receives UDP statsd events from a statsd client. |
| supervisorctlbeat |
This beat aims to parse the supervisorctl status command output and send it to elasticsearch for indexation |
| terminalbeat |
Runs an external command and forwards the stdout for the same to Elasticsearch/Logstash. |
| tracebeat |
Reads traceroute output and indexes them into Elasticsearch. |
| trivybeat |
Fetches Docker containers which are running on the same machine, scan CVEs of those containers using Trivy server and index them into Elasticsearch. |
| twitterbeat |
Reads tweets for specified screen names. |
| udpbeat |
Ships structured logs via UDP. |
| udplogbeat |
Accept events via local UDP socket (in plain-text or JSON with ability to enforce schemas). Can also be used for applications only supporting syslog logging. |
| unifiedbeat |
Reads records from Unified2 binary files generated by network intrusion detection software and indexes the records in Elasticsearch. |
| unitybeat |
Collects performance metrics from Dell EMC Unity storage array. |
| uwsgibeat |
Reads stats from uWSGI. |
| varnishlogbeat |
Reads log data from a Varnish instance and ships it to Elasticsearch. |
| varnishstatbeat |
Reads stats data from a Varnish instance and ships it to Elasticsearch. |
| vaultbeat |
Collects performance metrics and statistics from Hashicorp’s Vault. |
| wmibeat |
Uses WMI to grab your favorite, configurable Windows metrics. |
| yarnbeat |
Polls YARN and MapReduce APIs for cluster and application metrics. |
| zfsbeat |
Querying ZFS Storage and Pool Status |