ElasticsearchEventCollector

Search for and analyze data in real time. Supports version 6 and later.

Category

Database

Pack

Elasticsearch

Configuration parameters

• url — Server URL (required)
• auth_type — Authorization type (required)
• api_key_auth_credentials — API key ID
• credentials — Username
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• client_type — Client type
• fetch_index — Index to fetch incidents from
• fetch_query — Query String
• fetch_time_field — Index time field
• raw_query — Raw Query
• time_method — Time field type
• map_labels — Map JSON fields into labels
• fetch_size — The maximum number of results per fetch
• timeout — Request timeout (in seconds).
• isFetchEvents — Fetch events

Commands (1)

• es-get-events — This command is used for developing/ debugging and is to be used with caution, as it can cause the API request limit to be exceeded.