Cribl

Destination

Elasticsearch

Search, analyze, and visualize structured and unstructured data

Elasticsearch is a distributed, RESTful search and analytics engine for all types of structured or unstructured data, built on Apache Lucene. Elasticsearch indexed searching is the central component of the Elastic Stack, which includes Logstash data processing, Kibana visualizations, and Beats shipping agents).

Note: Logstash, Kibana, and Beats, as well as Grafana (which is not part of the Elastic Stack), are all supported via the same LogStream’s Elasticsearch Destination. Logstash, Filebeat, Winlogbeat, Fluentd, and Fluent Bit are all supported via LogStream’s Elasticsearch API Source.

How to get data flowing

This is a built-in integration between Cribl Stream and the Elasticsearch Bulk API.

Stream as source and Elasticsearch as Destination

  • Configure Stream to send data to Elasticsearch via Destinations > Elasticsearch.

  • Specify the Elastic cluster Bulk API endpoint, index, document type, backpressure behavior, and optional authentication and throttling parameters.

  • Stream will start sending data as it becomes available.

View Documentation

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on-Sandboxes for those interested in how companies globally leverage our products for their data challenges.