확장서비스
Elastic Defend
Elastic Agent
Elastic Defend Integration
This integration sets up templates and index patterns required for Elastic Defend.
Compatibility
For compatibility information view our documentation.
Compatibility
he log type of documents are stored in the logs-endpoint.* indices. The following sections define the mapped fields sent by the endpoint.
Field Description Type
@timestamp ate/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. Date
@timestamp ate/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. Date
@timestamp ate/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. Date
Screenshots
Details
Version 8.6.1
Category Cloud, Security
Elasticsearch assets Index Templates 18
Transforms 2
Ingest pipelines 18
Features logs, metrics
Subscription basic
  • Elastic Agent Integrations are recommended, but you can also use Beats. For more details, check out our comparison page
  • Elastic Agent Integrations are recommended, but you can also use Beats. For more details, check out our comparison page
  • Elastic Agent Integrations are recommended, but you can also use Beats. For more details, check out our comparison page
This documents all the inputs, streams, and variables available to use this integration programmatically via the Fleet Kibana API. Learn more
Inputs
  • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
    Collecting Node, Pod, Container, Volume and System metrics from Kubelet
    Streams
    • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
    • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
    • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
      Collect Kubernetes Controller Manager metrics
      Compatibility
      Field Description Type
      @timestamp ate/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. Date
      @timestamp ate/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. Date
      @timestamp ate/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. Date
    • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
    • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
  • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
  • kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)