- Elastic integrations
- Integrations quick reference
- 1Password
- Abnormal security
- ActiveMQ
- Active Directory Entity Analytics
- Admin By Request EPM integration
- Airflow
- Akamai
- Apache
- API (custom)
- Arbor Peakflow sP Logs
- Arista NG Firewall
- Atlassian
- Auditd
- Auth0
- authentik
- AWs
- Amazon CloudFront
- Amazon DynamoDB
- Amazon EBs
- Amazon EC2
- Amazon ECs
- Amazon EMR
- AWs API Gateway
- Amazon GuardDuty
- AWs Health
- Amazon Kinesis Data Firehose
- Amazon Kinesis Data stream
- Amazon MQ
- Amazon Managed streaming for Apache Kafka (MsK)
- Amazon NAT Gateway
- Amazon RDs
- Amazon Redshift
- Amazon s3
- Amazon s3 storage Lens
- Amazon security Lake
- Amazon sNs
- Amazon sQs
- Amazon VPC
- Amazon VPN
- AWs Bedrock
- AWs Billing
- AWs CloudTrail
- AWs CloudWatch
- AWs ELB
- AWs Fargate
- AWs Inspector
- AWs Lambda
- AWs Logs (custom)
- AWs Network Firewall
- AWs Route 53
- AWs security Hub
- AWs Transit Gateway
- AWs Usage
- AWs WAF
- Azure
- Activity logs
- App service
- Application Gateway
- Application Insights metrics
- Application Insights metrics overview
- Application state Insights metrics
- Azure logs (v2 preview)
- Azure OpenAI
- Billing metrics
- Container instance metrics
- Container registry metrics
- Container service metrics
- Custom Azure Logs
- Custom Blob storage Input
- Database Account metrics
- Event Hub input
- Firewall logs
- Frontdoor
- Functions
- Microsoft Entra ID
- Monitor metrics
- Network Watcher VNet
- Network Watcher NsG
- Platform logs
- Resource metrics
- spring Cloud logs
- storage Account metrics
- Virtual machines metrics
- Virtual machines scaleset metrics
- Barracuda
- BeyondInsight and Password safe Integration
- BitDefender
- Bitwarden
- blacklens.io
- Blue Coat Director Logs
- BBOT (Bighuge BLs OsINT Tool)
- Box Events
- Bravura Monitor
- Broadcom ProxysG
- Canva
- Cassandra
- CEL Custom API
- Ceph
- Check Point
- Cilium Tetragon
- CIsA Known Exploited Vulnerabilities
- Cisco
- Cisco Meraki Metrics
- Citrix
- Claroty CTD
- Cloudflare
- Cloud Asset Inventory
- CockroachDB Metrics
- Common Event Format (CEF)
- Containerd
- CoreDNs
- Corelight
- Couchbase
- CouchDB
- Cribl
- Crowdstrike
- Cyberark
- Cybereason
- CylanceProtect Logs
- Custom Websocket logs
- Darktrace
- Data Exfiltration Detection
- DGA
- Digital Guardian
- Docker
- DomainTools Real Time Unified Feeds
- Elastic APM
- Elastic Fleet server
- Elastic security
- Elastic stack monitoring
- Elasticsearch service Billing
- Envoy Proxy
- EsET PROTECT
- EsET Threat Intelligence
- etcd
- Falco
- F5
- File Integrity Monitoring
- Filestream (custom)
- FireEye Network security
- First EPss
- Forcepoint Web security
- ForgeRock
- Fortinet
- Gigamon
- GitHub
- GitLab
- Golang
- Google Cloud
- Custom GCs Input
- GCP
- GCP Audit logs
- GCP Billing metrics
- GCP Cloud Run metrics
- GCP CloudsQL metrics
- GCP Compute metrics
- GCP Dataproc metrics
- GCP DNs logs
- GCP Firestore metrics
- GCP Firewall logs
- GCP GKE metrics
- GCP Load Balancing metrics
- GCP Metrics Input
- GCP Pubsub logs (custom)
- GCP Pubsub metrics
- GCP Redis metrics
- GCP security Command Center
- GCP storage metrics
- GCP VPC Flow logs
- GCP Vertex AI
- GoFlow2 logs
- Hadoop
- HAProxy
- Hashicorp Vault
- HTTP Endpoint logs (custom)
- IBM MQ
- IIs
- Imperva
- InfluxDb
- Infoblox
- Iptables
- Istio
- Jamf Compliance Reporter
- Jamf Pro
- Jamf Protect
- Jolokia Input
- Journald logs (custom)
- JumpCloud
- Kafka
- Keycloak
- Kubernetes
- LastPass
- Lateral Movement Detection
- Linux Metrics
- Living off the Land Attack Detection
- Logs (custom)
- Lumos
- Lyve Cloud
- Mattermost
- Memcached
- Menlo security
- Microsoft
- Microsoft 365
- Microsoft Defender for Cloud
- Microsoft Defender for Endpoint
- Microsoft DHCP
- Microsoft DNs server
- Microsoft Entra ID Entity Analytics
- Microsoft Exchange Online Message Trace
- Microsoft Exchange server
- Microsoft Graph Activity Logs
- Microsoft M365 Defender
- Microsoft Office 365 Metrics Integration
- Microsoft sentinel
- Microsoft sQL server
- Mimecast
- Modsecurity Audit
- MongoDB
- MongoDB Atlas
- MysQL
- Nagios XI
- NATs
- NetFlow Records
- Netskope
- Network Beaconing Identification
- Network Packet Capture
- Nginx
- Okta
- Oracle
- OpenAI
- OpenCanary
- Osquery
- Palo Alto
- pfsense
- PHP-FPM
- PingOne
- PingFederate
- Pleasant Password server
- PostgresQL
- Prometheus
- Proofpoint TAP
- Proofpoint On Demand
- Pulse Connect secure
- Qualys VMDR
- QNAP NAs
- RabbitMQ Logs
- Radware DefensePro Logs
- Rapid7
- Redis
- Rubrik RsC Metrics Integration
- sailpoint Identity security Cloud
- salesforce
- sentinelOne
- serviceNow
- slack Logs
- snort
- snyk
- sonicWall Firewall
- sophos
- spring Boot
- spyCloud Enterprise Protection
- sQL Input
- squid Logs
- sRX
- sTAN
- statsd Input
- sublime security
- suricata
- stormshield sNs
- symantec
- symantec Endpoint security
- sysmon for Linux
- sysdig
- syslog Router Integration
- system
- system Audit
- Tanium
- TCP Logs (custom)
- Tenable OT security
- Teleport
- Tenable
- Threat intelligence
- ThreatConnect
- Threat Map
- Thycotic secret server
- Tines
- Traefik
- Trellix
- Trend Micro
- TYCHON Agentless
- UDP Logs (custom)
- Universal Profiling
- Varonis integration
- Vectra Detect
- VMware
- WatchGuard Firebox
- Websphere Application server
- Windows
- Wiz
- Zeek
- ZeroFox
- Zero Networks
- ZooKeeper Metrics
- Zoom
- Zscaler
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.