Elastic integrations

Stream in logs, metrics, traces, content, and more from your apps, endpoints, infrastructure, cloud, network, workplace tools, and every other common source in your ecosystem. Send alerts to your notification tool of choice. Connect to all the systems that matter with ease.

icon-magnifying-glass
.NET
1Password
Abuse.ch Malware & URL Threat Intel
ActiveMQ
Aerospike
Akamai
AlienVault Open Threat Exchange (OTX)
Amazon CloudWatch
Amazon DynamoDB
Amazon EBS
Amazon EC2
Amazon RDS
Amazon S3
Amazon SNS
Amazon SQS
Amazon VPC
Amazon VPC NAT Gateway
Anomali ThreatStream
Apache
Apache Spark
Apache Tomcat
Atlassian Confluence
Atlassian Jira
auditd
Auditd Manager
AWS
AWS Billing
AWS CloudTrail
AWS ECS
AWS Elastic Load Balancing
AWS Lambda
AWS Network Firewall
AWS Security Hub
AWS Transit Gateway
AWS Usage
AWS VPN
AWS WAF
Azure
Azure Active Directory
Azure Activity Logs
Azure Application Insights
Azure Application State Insights
Azure Audit Logs
Azure Billing
Azure Container Instance
Azure Container Registry
Azure Container Service
Azure Database Account
Azure Event Hub
Azure Firewall
Azure Monitor
Azure Platform
Azure Spring Cloud
Azure Storage Account
Azure VM
Azure VM Scale Sets
Azure WAF
Barracuda CloudGen Firewall
Barracuda Spam Firewall
Barracuda WAF
Beats
Bitbucket
Blue Coat Director
Box
Box Events
Cassandra
Ceph
Cisco Aironet
Cisco ASA
Cisco Duo
Cisco Firepower Threat Defense
Cisco Identity Services Engine (ISE)
Cisco IOS
Cisco Meraki
Cisco Nexus
Cisco Secure Email Gateway
Cisco Secure Endpoint
Cisco Umbrella
Citrix Web Application Firewall
Cloud Foundry
Cloudflare
CockroachDB
collectd
Collective Intelligence Framework
Common Event Format (CEF)
Confluence Cloud
Confluence Server
Consul
CoreDNS
Couchbase
CouchDB
CrowdStrike Falcon
Custom Connector
Custom Windows event logs
CyberArk Privileged Threat Analytics
Cybersixgill
Cylance Protect
Darktrace
Docker
Dropbox
Dropbox Paper
Dropwizard
Elastic Agent
Elastic APM Server
Elastic App Search
Elasticsearch
Email
Endpoint Security
Envoy
etcd
F5 BIG-IP Access Policy Manager
F5 BIG-IP Advanced Firewall Manager
Fargate
File Integrity Monitoring
FireEye Network Security
Fleet Server
Fluentd
Forcepoint
Fortinet Forticlient Endpoint Protection
Fortinet Fortigate
Fortinet FortiMail
Fortinet FortiManager
GitHub
Gmail
Go
Go Expvar
Google Cloud
Google Cloud Anthos
Google Cloud Audit
Google Cloud Billing
Google Cloud Compute
Google Cloud Firewall
Google Cloud Functions
Google Cloud Load Balancing
Google Cloud Pub/Sub
Google Cloud Stackdriver
Google Cloud Storage
Google Cloud VPC
Google Drive
Google Santa
Google Workspace
Graphite
Hadoop
HAProxy
Hashicorp Vault
Hitachi ID Bravura
HTTP
HTTP Check
IBM MQ
IBM Resilient
Icinga
ICMP Check
IIS
Imperva Secure Sphere
Infoblox BloxOne DDI
Infoblox NIOS
iptables
Istio
Jaeger
Jamf Compliance Reporter
Java
JavaScript
JDBC
Jira Cloud
Jira Server
JMS
JMX Jolokia
journald
Juniper Junos OS
Juniper Netscreen
Juniper SRX Series
Kafka
Keycloak
Kibana
Kubernetes
Kubernetes API Server
Kubernetes Controller Manager
Kubernetes Events
Kubernetes Metrics Service
Kubernetes Proxy
Kubernetes Scheduler
kvm
LastPass
Linux
Linux Audit Framework
Linux systemd journals
Log files (Generic)
Logstash
Malware Information Sharing Platform (MISP)
Memcached
Microsoft 365 (Office 365)
Microsoft 365 Defender
Microsoft Defender for Endpoint
Microsoft DHCP Server
Microsoft IIS
Microsoft OneDrive
Microsoft SQL Server
Microsoft Teams
Mimecast
ModSecurity
MongoDB
MQTT
Munin
MySQL
Nagios XI
NATS
NATS Streaming
NetFlow
Netscout Arbor Sightline
Netskope
Network Packet Capture
NGINX
NGINX Ingress Controller
Node.js
Okta
OpenMetrics
OpenTelemetry
OpenTracing
Oracle
Osquery Log Collection
Osquery Manager
PagerDuty
Palo Alto Cortex XDR
Palo Alto Networks
Pensando
pfSense
PHP
PHP FPM
Ping Identity PingOne
PostgreSQL
PowerShell
Prebuilt Security Detection Rules
Prometheus
Proofpoint Email Security
Proofpoint Targeted Attack Protection (TAP)
Python
QNAP NAS
RabbitMQ
Radware DefensePro
Recorded Future
Redis
Redis Enterprise
Ruby
Salesforce
Salesforce Sandboxes
SentinelOne
ServiceNow ITOM
ServiceNow ITSM
ServiceNow SecOps
SharePoint Online
SharePoint Server
Slack
SNMP
Snort
Snyk
Sonicwall Firewall
Sophos UTM
Sophos XG Firewall
Spring Boot
SQL
Squid Proxy Server
StatsD
Suricata
Swimlane SOAR
Symantec Endpoint Protection
syslog
Sysmon
System
System Audit
TCP Check
Tenable.sc
ThreatQuotient
Traefik
Trend Micro Vision One
Twitter
uWSGI
VMware Carbon Black Cloud
VMware Carbon Black EDR
VMware vSphere
vSphere
Web Crawler
Webhook
Windows
X.509 SSL/TLS Certificate Check
xMatters
Zeek (Bro)
Zendesk
ZeroFox
ZooKeeper
Zoom
Zscaler Internet Access
Zscaler Private Access