This integration sets up templates and index patterns required for Elastic Defend.
Compatibility
For compatibility information view our documentation.
Compatibility
he log type of documents are stored in the logs-endpoint.* indices. The following sections define the mapped fields sent by the endpoint.
Field
Description
Type
@timestamp
ate/time when the event originated. This is the date/time
extracted from the event, typically representing when
the event was generated by the source. If the event source
has no original timestamp, this value is typically populated
by the first time the event was received by the pipeline.
Required field for all events.
Date
@timestamp
ate/time when the event originated. This is the date/time
extracted from the event, typically representing when
the event was generated by the source. If the event source
has no original timestamp, this value is typically populated
by the first time the event was received by the pipeline.
Required field for all events.
Date
@timestamp
ate/time when the event originated. This is the date/time
extracted from the event, typically representing when
the event was generated by the source. If the event source
has no original timestamp, this value is typically populated
by the first time the event was received by the pipeline.
Required field for all events.
Date
Screenshots
Details
Version
8.6.1
Category
Cloud, Security
Elasticsearch assets
Index Templates
18
Transforms
2
Ingest pipelines
18
Features
logs, metrics
Subscription
basic
Elastic Agent Integrations are recommended, but you can also use Beats. For more details, check out our comparison page
Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs
Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs Metrics about Cronjobs
ate/time when the event originated. This is the date/time
extracted from the event, typically representing when
the event was generated by the source. If the event source
has no original timestamp, this value is typically populated
by the first time the event was received by the pipeline.
Required field for all events.
Date
@timestamp
ate/time when the event originated. This is the date/time
extracted from the event, typically representing when
the event was generated by the source. If the event source
has no original timestamp, this value is typically populated
by the first time the event was received by the pipeline.
Required field for all events.
Date
@timestamp
ate/time when the event originated. This is the date/time
extracted from the event, typically representing when
the event was generated by the source. If the event source
has no original timestamp, this value is typically populated
by the first time the event was received by the pipeline.
Required field for all events.
Date
kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)
kubelet-kubernetes/metrics (Collect Kubernetes metrics from Kubelet API)