ElasticsearchEventCollector

Search for and analyze data in real time. Supports version 6 and later.

Database · Elasticsearch

Configuration parameters

  • url — Server URL (required)
  • auth_type — Authorization type (required)
  • api_key_auth_credentials — API key ID
  • credentials — Username
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • client_type — Client type
  • fetch_index — Index to fetch incidents from
  • fetch_query — Query String
  • fetch_time_field — Index time field
  • raw_query — Raw Query
  • time_method — Time field type
  • map_labels — Map JSON fields into labels
  • fetch_size — The maximum number of results per fetch
  • timeout — Request timeout (in seconds).
  • isFetchEvents — Fetch events

Commands (1)

  • es-get-events

    This command is used for developing/ debugging and is to be used with caution, as it can cause the API request limit to be exceeded.