Cribl

Source

Elasticsearch

Search, analyze, and visualize structured and unstructured data

Elasticsearch is a distributed, RESTful search and analytics engine for all types of structured or unstructured data, built on Apache Lucene. Elasticsearch indexed searching is the central component of the Elastic Stack, which includes Logstash data processing, Kibana visualizations, and Beats shipping agents).

Note: Logstash, Kibana, and Beats, as well as Grafana (which is not part of the Elastic Stack), are all supported via the same LogStream’s Elasticsearch Destination. Logstash, Filebeat, Winlogbeat, Fluentd, and Fluent Bit are all supported via LogStream’s Elasticsearch API Source.

How to get data flowing

This is a built-in integration between Cribl Stream and the Elasticsearch Bulk API.

Elasticsearch as Source and Stream as Destination

  • Configure Stream to read data from your Elasticsearch cluster via Sources > Elasticsearch API.

  • Specify the IP address, port, Elasticsearch API endpoint, and optional authentication and TLS parameters.

  • Stream will start fetching data as it becomes available.

View Documentation

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on-Sandboxes for those interested in how companies globally leverage our products for their data challenges.