Logstash Integrations

Cloud-based solution for observability that helps businesses manage and track workload and performance through a single dashboard. Monitor all the services you run on your cloud without compromising cost, granularity or scale. Groundcover is a cloud-native APM solution that makes observability easy so you can focus on creating world-class products. Groundcover's proprietary sensor unlocks unprecedented granularity for all your applications. This eliminates the need for costly changes in code and development cycles, ensuring monitoring continuity.

Criminal IP is a cyber threat intelligence search engine that detects vulnerabilities in personal and corporate cyber assets in real time and allows users to take preemptive actions. Coming from the idea that individuals and businesses would be able to boost their cyber security by obtaining information about accessing IP addresses in advance, Criminal IP's extensive data of over 4.2 billion IP addresses and counting to provide threat-relevant information about malicious IP addresses, malicious links, phishing websites, certificates, industrial control systems, IoTs, servers, CCTVs, etc. Using Criminal IP’s four key features (Asset Search, Domain Search, Exploit Search, and Image Search), you can search for IP risk scores and vulnerabilities related to searched IP addresses and domains, vulnerabilities for each service, and assets that are open to cyber attacks in image forms, in respective order.

Engineered for peak performance and efficient resource use, KrakenD can manage a staggering 70k requests per second on just one instance. Its stateless build ensures hassle-free scalability, sidelining complications like database upkeep or node synchronization. In terms of features, KrakenD is a jack-of-all-trades. It accommodates multiple protocols and API standards, offering granular access control, data shaping, and caching capabilities. A standout feature is its Backend For Frontend pattern, which consolidates various API calls into a single response, simplifying client interactions. On the security front, KrakenD is OWASP-compliant and data-agnostic, streamlining regulatory adherence. Operational ease comes via its declarative setup and robust third-party tool integration. With its open-source community edition and transparent pricing model, KrakenD is the go-to API Gateway for organizations that refuse to compromise on performance or scalability.

Access and access management today have become more complex and frustrating. strongDM redesigns access around the people who need it, making it incredibly simple and usable while ensuring total security and compliance. We call it People-First Access. End users enjoy fast, intuitive, and auditable access to the resources they need. Administrators gain precise controls, eliminating unauthorized and excessive access permissions. IT, Security, DevOps, and Compliance teams can easily answer who did what, where, and when with comprehensive audit logs. It seamlessly and securely integrates with every environment and protocol your team needs, with responsive 24/7 support.

Monitor your servers, containers, and applications, in high-resolution and in real-time. Netdata collects metrics per second and presents them in beautiful low-latency dashboards. It is designed to run on all of your physical and virtual servers, cloud deployments, Kubernetes clusters, and edge/IoT devices, to monitor your systems, containers, and applications. It scales nicely from just a single server to thousands of servers, even in complex multi/mixed/hybrid cloud environments, and given enough disk space it can keep your metrics for years. KEY FEATURES: Collects metrics from 800+ integrations Real-Time, Low-Latency, High-Resolution Unsupervised Anomaly Detection Powerful Visualization Out of box Alerts systemd Journal Logs Explorer Low Maintenance Open and Extensible Troubleshoot slowdowns and anomalies in your infrastructure with thousands of per-second metrics, meaningful visualisations, and insightful health alarms with zero configuration. Netdata is different. Real-Time data collection and visualization. Infinite scalability baked into its design. Flexible and extremely modular. Immediately available for troubleshooting, requiring zero prior knowledge and preparation.

Amazon Simple Storage Service (Amazon S3), an object storage service, offers industry-leading scalability and data availability, security, performance, and scalability. Customers of all sizes and industries can use Amazon S3 to store and protect any amount data for a variety of purposes, including data lakes, websites and mobile applications, backup, restore, archive, enterprise apps, big data analytics, and IoT devices. Amazon S3 offers easy-to-use management tools that allow you to organize your data and set up access controls that are tailored to your business, organizational, or compliance needs. Amazon S3 is built for 99.999999999% (11 9,'s) of durability and stores data for millions applications for companies around the globe. You can scale your storage resources to meet changing demands without having to invest upfront or go through resource procurement cycles. Amazon S3 is designed to last 99.999999999% (11 9,'s) of data endurance.

All sizes of companies can use object storage. You can store any amount of data. You can retrieve it as often and as often as you like. You can configure your data with Object Lifecycle Management to automatically transition to lower cost storage classes when it meets certain criteria, such as when it reaches a certain date or when you have stored a newer version. Cloud Storage offers a growing number of storage locations that you can store your data, with multiple redundancy options. You can choose where and how to store your data, regardless of whether you want to optimize for a split-second response or create a robust disaster recovery strategy. Two highly efficient online routes to Cloud Storage are Storage Transfer Service and Transfer Service. Both offer the speed and scalability you need to make data transfers faster. Our Transfer Appliance is a shippable storage device that can be used for offline data transfer.

Full-stack platform for monitoring your hardware and software. InsightCat, a full-stack monitoring solution for infrastructure monitoring, allows you to search, analyze, aggregate and summarize system metrics from one place. The solution was designed to be simple and address the most pressing requests of DevOps and SecOps (System administrators, SecOps and IT specialists) related to infrastructure monitoring, security log management, log management, log management, and other issues. This solution allows you to: Perform infrastructure monitoring. Identify anomalies in your infrastructure and eliminate them as quickly possible. This will also prevent similar problems from happening again. Synthetic monitoring. Monitoring your web services 24 hours a day. Be aware of any critical downtimes in advance. Log management. Log management. Smart alerting and escalation. To keep your team informed of any unusual behavior, spikes or errors, set up the flexible alarming system.

Squadcast is a tool for incident management that was specifically designed for SRE. Squadcast Actions can help you create a culture of blamelessness by reducing the need to have physical war rooms.

Elastic is a search company. Elasticsearch, Kibana Beats, Logstash, and Elasticsearch are the founders of the ElasticStack. These SaaS offerings allow data to be used in real-time and at scale for analytics, security, search, logging, security, and search. Elastic has over 100,000 members in 45 countries. Elastic's products have been downloaded more than 400 million times since their initial release. Today, thousands of organizations including Cisco, eBay and Dell, Goldman Sachs and Groupon, HP and Microsoft, as well as Netflix, Uber, Verizon and Yelp use Elastic Stack and Elastic Cloud to power mission critical systems that generate new revenue opportunities and huge cost savings. Elastic is headquartered in Amsterdam, The Netherlands and Mountain View, California. It has more than 1,000 employees in over 35 countries.

Redis Labs is the home of Redis. Redis Enterprise is the best Redis version. Redis Enterprise is more than a cache. Redis Enterprise can be free in the cloud with NoSQL and data caching using the fastest in-memory database. Redis can be scaled, enterprise-grade resilience, massive scaling, ease of administration, and operational simplicity. Redis in the Cloud is a favorite of DevOps. Developers have access to enhanced data structures and a variety modules. This allows them to innovate faster and has a faster time-to-market. CIOs love the security and expert support of Redis, which provides 99.999% uptime. Use relational databases for active-active, geodistribution, conflict distribution, reads/writes in multiple regions to the same data set. Redis Enterprise offers flexible deployment options. Redis Labs is the home of Redis. Redis JSON, Redis Java, Python Redis, Redis on Kubernetes & Redis gui best practices.

RabbitMQ is lightweight, portable, and easy to use on the premises or in the cloud. It supports multiple messaging protocols. RabbitMQ can both be deployed in distributed or federated configurations to meet high availability and scale requirements.

Sematext Cloud provides all-in-one observability solutions for modern software-based businesses. It provides key insights into both front-end and back-end performance. Sematext includes infrastructure, synthetic monitoring, transaction tracking, log management, and real user & synthetic monitoring. Sematext provides full-stack visibility for businesses by quickly and easily exposing key performance issues through a single Cloud solution or On-Premise.

AWS offers a wide range of services, including database storage, compute power, content delivery, and other functionality. This allows you to build complex applications with greater flexibility, scalability, and reliability. Amazon Web Services (AWS), the world's largest and most widely used cloud platform, offers over 175 fully featured services from more than 150 data centers worldwide. AWS is used by millions of customers, including the fastest-growing startups, large enterprises, and top government agencies, to reduce costs, be more agile, and innovate faster. AWS offers more services and features than any other cloud provider, including infrastructure technologies such as storage and databases, and emerging technologies such as machine learning, artificial intelligence, data lakes, analytics, and the Internet of Things. It is now easier, cheaper, and faster to move your existing apps to the cloud.

GitHub is the most trusted, secure, and scalable developer platform in the world. Join millions of developers and businesses who are creating the software that powers the world. Get the best tools, support and services to help you build with the most innovative communities in the world. There's a free option for managing multiple contributors: GitHub Team Open Source. We also have GitHub Sponsors that help you fund your work. The Pack is back. We have partnered to provide teachers and students free access to the most powerful developer tools for the school year. Work for a government-recognized nonprofit, association, or 501(c)(3)? Receive a discount Organization account through us.

Salesforce helps sales teams improve their performance and reach their goals. Salesforce is the most widely used CRM in the world. Salesforce gives teams access to tools that enable them to grow their accounts and find new customers. They also allow them to close deals faster and from any location. Salesforce offers many features, including contact management, opportunity management and lead management, email integrations, reports and dashboards as well as sales forecasting, files sync-and-share, and reports and dashboards. You will spend less time looking at spreadsheets and more time managing your business. No software, no hardware, no hassle. In minutes, our simple setup assistant will streamline sales and answer customer questions. Connect data from sales, service, marketing to create seamless, personalized experiences for buyers. You can see a complete customer view, including their account, activity history, connections, and more. You can also pull in social data to get a deeper understanding of your customers.

Amazon CloudWatch is a monitoring service that provides observability and data for developers, DevOps engineers, site reliability engineers (SREs), IT managers, and other users. CloudWatch gives you data and actionable insights that will help you monitor your applications, respond quickly to system-wide performance changes and optimize resource utilization. It also provides a unified view on operational health. CloudWatch gathers operational and monitoring data in the form logs, metrics and events. This gives you a single view of AWS resources, applications and services that are hosted on AWS and on-premises. CloudWatch can be used to detect anomalous behavior, set alarms, visualize logs side-by, take automated actions, troubleshoot problems, and uncover insights to help you keep your applications running smoothly.

SQLite is a C language library that implements a small, fast and self-contained SQL database engine. It is highly reliable, compact, efficient, and fully-featured. SQLite is the most widely used database engine in the globe. SQLite is embedded in all mobile phones and computers. It also comes with countless other applications that people use every single day. SQLite is an embedded library that implements a self contained, serverless, zero configuration, transactional SQL database engine. The code for SQLite can be used for commercial and private purposes. SQLite is the most used database in the world, with many high-profile projects and more applications than we can count.

X, formerly known as Twitter, is one of the largest social networks in the world. Follow your interests. Listen to what people are saying. Join the conversation. Watch what's happening around the world. Conversation is the key to real change. Here, your voice matters. Come as you are, and together we will do what is right (not easy) to serve public conversation.

ProActive Parallel Suite, a member of the OW2 Open Source Community for acceleration and orchestration, seamlessly integrated with the management and operation of high-performance Clouds (Private, Public with bursting capabilities). ProActive Parallel Suite platforms offer high-performance workflows and application parallelization, enterprise Scheduling & Orchestration, and dynamic management of private Heterogeneous Grids & Clouds. Our users can now simultaneously manage their Enterprise Cloud and accelerate and orchestrate all of their enterprise applications with the ProActive platform.

MetricFire provides cloud-based server and application monitoring which scales from hundreds of unique metrics right up to millions of metrics at the Enterprise level. With Hosted Graphite, view your metrics on beautiful dashboards in real-time with built-in alerting that integrates with your existing tools, such as Amazon Web Services, Ops Genie, Heroku, Slack, and much more. Data is displayed on dashboards with customisable metrics and alerts so that you can quickly resolve issues, track your data, and share insights with your team.

Axonius gives IT and security teams the confidence to control complexity by providing a system of record for all digital infrastructure. With a comprehensive understanding of all assets including devices, identities, software, SaaS applications, vulnerabilities, security controls, and the context between them, customers are able to mitigate threats, navigate risk, decrease incident response time, automate action, and inform business-level strategy — all while eliminating manual, repetitive tasks.

Amazon Redshift is preferred by more customers than any other cloud data storage. Redshift powers analytic workloads for Fortune 500 companies and startups, as well as everything in between. Redshift has helped Lyft grow from a startup to multi-billion-dollar enterprises. It's easier than any other data warehouse to gain new insights from all of your data. Redshift allows you to query petabytes (or more) of structured and semi-structured information across your operational database, data warehouse, and data lake using standard SQL. Redshift allows you to save your queries to your S3 database using open formats such as Apache Parquet. This allows you to further analyze other analytics services like Amazon EMR and Amazon Athena. Redshift is the fastest cloud data warehouse in the world and it gets faster each year. The new RA3 instances can be used for performance-intensive workloads to achieve up to 3x the performance compared to any cloud data warehouse.

Coralogix is the most popular stateful streaming platform, providing engineering teams with real-time insight and long-term trend analysis without relying on storage or indexing. To manage, monitor, alert, and manage your applications, you can import data from any source. Coralogix automatically narrows the data from millions of events to common patterns, allowing for faster troubleshooting and deeper insights. Machine learning algorithms constantly monitor data patterns and flows among system components and trigger dynamic alarms to let you know when a pattern is out of the norm without the need for static thresholds or pre-configurations. Connect any data in any format and view your insights anywhere, including our purpose-built UI and Kibana, Grafana as well as SQL clients and Tableau. You can also use our CLI and full API support. Coralogix has successfully completed the relevant privacy and security compliances by BDO, including SOC 2, PCI and GDPR.

Do you struggle with providing access to large data sets that are rapidly growing or enabling distributed content-based uses? Tape is cost-effective, but data is not always available and tape can be difficult to manage. Public cloud can present the challenge of unpredictable, compounding recurring costs and inability to meet privacy and performance requirements. DataCore Swarm is an on-premises object storage system that simplifies the process of managing, storing, and protecting data. It also allows S3/HTTP access for any application, device, and end-user. Swarm transforms your data archive to a flexible, immediately accessible content library that allows remote workflows, on demand access, and massive scaling.

IRI Voracity is an end-to-end software platform for fast, affordable, and ergonomic data lifecycle management. Voracity speeds, consolidates, and often combines the key activities of data discovery, integration, migration, governance, and analytics in a single pane of glass, built on Eclipse™. Through its revolutionary convergence of capability and its wide range of job design and runtime options, Voracity bends the multi-tool cost, difficulty, and risk curves away from megavendor ETL packages, disjointed Apache projects, and specialized software. Voracity uniquely delivers the ability to perform data: * profiling and classification * searching and risk-scoring * integration and federation * migration and replication * cleansing and enrichment * validation and unification * masking and encryption * reporting and wrangling * subsetting and testing Voracity runs on-premise, or in the cloud, on physical or virtual machines, and its runtimes can also be containerized or called from real-time applications or batch jobs.

The most widely used observability platform, built on the ELK Stack, is the best choice. It converges silos and delivers unified visibility and actionable insight. All your observability data must be in one stack to effectively monitor and gain insight across distributed systems. Unify all data from the application, infrastructure, user, and other sources to reduce silos and improve alerting and observability. Unified solution that combines unlimited telemetry data collection with search-powered problem resolution for optimal operational and business outcomes. Converge data silos with the ingesting of all your telemetry data from any source, in an open, extensible and scalable platform. Automated anomaly detection powered with machine learning and rich data analysis can speed up problem resolution.

Amazon Simple Queue Service is a fully managed message queue service that allows you to scale distributed systems, microservices, and serverless applications. SQS removes the complexity and overhead involved in managing and operating message-oriented middleware and allows developers to concentrate on differentiating work. SQS allows you to send, store, or receive messages between software components at any volume without losing messages, or requiring additional services. You can get started with SQS within minutes by using the AWS console, Command Line Interface, or SDK of choice and three simple commands.

Suricata can perform real-time intrusion detection (IDS), offline pcap processing (NSM), and inline intrusion preventions (IPS) on the network. Suricata analyzes network traffic using powerful rules and signature languages. It also has Lua scripting support to detect complex threats. With standard input and output formats like YAML and JSON integrations with tools like existing SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other database become effortless. Suricata's community-driven development is fast-paced and focuses on security, usability, efficiency. The Open Information Security Foundation (OISF) owns and supports Suricata's code and project. This non-profit foundation is committed to Suricata’s continued development and success as an open-source project.

Beats is an open platform that allows single-purpose data shippers to use. They can send data from thousands or hundreds of machines and systems to Logstash and Elasticsearch. Beats are open-source data shippers that you can install on your servers to send operational information to Elasticsearch. Elastic offers Beats to capture data and event logs. Beats can send data directly via Elasticsearch or Logstash. There you can further process the data and enhance it before visualizing it in Kibana. You can quickly get up and running with infrastructure metrics monitoring or centralized log analytics. You can try the Metrics and Logs apps in Kibana. For more information, see Analyze metrics or Monitor logs. Filebeat allows you to easily forward and centralize logs from any source, including security devices, cloud containers, hosts, and OT.

EraSearch is purpose-built for cloud-native deployments. It offers a dynamic data fabric that leverages storage & compute decoupled storage and compute, a true zero schema design, and adaptive indexing. This allows you to provide an infinitely-scalable log management experience at a remarkable reduction in cost and complexity. Elasticsearch is used to build many log management products. To solve the key problems of EraSearch, we built it from scratch. It is easy to manage EraSearch with K8s by adopting a stateless design of all core components. Elasticsearch is used to build many log management products. To solve the key problems of EraSearch, we built it from scratch. EraSearch is able to handle data at a significantly reduced cost by using a modern, coordinated ingest design. EraSearch is completely hands-off so you don't have to worry about cluster health.

LogIQ.AI's LogFlow allows you to centrally manage your observability data pipes. Data streams are automatically organized and optimized as they arrive for your business teams or knowledge workers. XOps teams can centralize the management of data flows, increase data quality, and relevance. LogFlow's InstaStore, which can be built on any object store allows for infinite data retention and data replay to any target observation platform of your choosing. Analyze operational metrics across applications, infrastructure and gain actionable insight that will help you scale with confidence and maintain high availability. By analyzing and collecting behavioral data from business systems, you can help your business make better business decisions and provide better user experiences. Don't let new attack techniques catch you off guard. Automate threat prevention and remediation by automating the detection and analysis of threat patterns from multiple sources.

IP Threat Intel provides real-time threat information that helps security teams reduce alert overload and accelerate triage on TIPs, SOAR & SIEM platforms. Available as an API to your SIEM/SOAR/TIP, or as a database on-premise for the most demanding workloads. The feed provides detailed data on IP addresses observed over the past 30 days including ports targeted by IPs. It is updated every 60 minutes to reflect the current threat environment. Each IP entry contains context on the volume of events over the last 30 days, as well as the most recent detection made by ELLIO’s deception network. This list includes all IP addresses observed in the past 24 hours. Each IP entry contains tags and comments that provide context about the targeted regions, the connection volume and the last IP observed by ELLIO’s deception network. It is updated every 5 minutes to ensure you have the latest information for your investigation.

Log data can provide powerful insights to help you achieve complete security observability. Multi-platform tool that enhances threat prevention and improves infrastructure visibility. With over 120 configurable modules and support for more than 100 operating system versions, you can gain comprehensive insights as well as increased security. Reduce the cost of your SIEM by reducing noise and unnecessary log data. Filter events, trim unused fields and remove duplicates in order to improve the quality of your logs. With a single tool, you can collect and aggregate logs across your entire organization. Reduce the complexity of managing security-related incidents and reduce detection and response time. By centralizing certain logs into an SIEM, and archiving other logs on your long-term storage, you can empower your organization to meet compliance regulations. NXLog Platform provides centralized log management with flexible processing.

Deep.BI allows media, insurance, E-commerce, and banking enterprises to increase their revenues by anticipating user behavior and automating actions to convert them to paying customers. Deep.BI's next-generation enterprise data warehouse provides predictive customer data platforms with real-time user scoring. We help digital platforms and businesses improve their products, content, and distribution. Deep.BI's platform gathers vast amounts of data about product usage and consumption, and provides real-time and actionable insights. The Deep.Conveyor data pipeline generates real-time, actionable insights in seconds. These insights can be augmented by the Deep.Score event scoring platform built with custom AI algorithms. They are also available for analysis in Deep.Explorer's business intelligence platform.

Apache CouchDB™, allows you to access your data wherever you need it. The Couch Replication Protocol can be used in a variety products and projects that span all possible computing environments, from global distributed server-clusters to mobile phones to web browsers.

You can quickly collect, process, analyze, and analyze video and data streams. Amazon Kinesis makes it easy for you to quickly and easily collect, process, analyze, and interpret streaming data. Amazon Kinesis provides key capabilities to process streaming data at any scale cost-effectively, as well as the flexibility to select the tools that best fit your application's requirements. Amazon Kinesis allows you to ingest real-time data, including video, audio, website clickstreams, application logs, and IoT data for machine learning, analytics, or other purposes. Amazon Kinesis allows you to instantly process and analyze data, rather than waiting for all the data to be collected before processing can begin. Amazon Kinesis allows you to ingest buffer and process streaming data instantly, so you can get insights in seconds or minutes, instead of waiting for hours or days.

You've spent years building up your business. Don't let cyber criminals destroy that in seconds. REDXRAY's proprietary intelligence feeds can identify threats daily against your networks, target companies/agencies, or supply chain. The emailed threat report covers the following types of threats: Botnet Tracker (also known as Botnet Tracker), Breach Data (also known as Breach Data), Keylogger Records (also known as Keylogger Records), Malicious Emails Context and Malicious Email Detections), OSINT Records, Sinkhole Traffic and THREATRECON Records.

Graphite, an enterprise-ready monitoring tool, works equally well on both cheap hardware and Cloud infrastructure. Graphite is used by teams to monitor the performance of their websites and applications, as well as business services and networked servers. It was the beginning of a new generation monitoring tools that makes it easier than ever for users to store, retrieve, share and visualize time-series information. Chris Davis, an Orbitz employee, originally created Graphite in 2006. It was a side project that eventually became their main monitoring tool. Orbitz released Graphite under the Apache 2.0 open-source license in 2008. Many large companies have used Graphite in production to help them plan for growth and monitor their e-commerce services. The Carbon service feeds metrics into the stack, which then writes the data to Whisper databases for long term storage.

We take care of everything. You can create the perfect CI/CD platform that meets your company's needs with zero vendor lock-in. Stop building toolchain automation and stop writing manual scripts. Your engineers can now focus on your core business. The declarative model of pipeline workflows allows you to focus on what's required, not how it's done. This includes software builds, security scans and unit testing, as well as deployments. Blueprints allows you to diagnose any failures within Opsera by displaying the console output of each step of your pipeline execution. Comprehensive software delivery analytics for your CI/CD process in one view. This includes Lead Time, Change Failure Ratio, Deployment Frequency and Time to Restore. Contextualized logs allow for faster resolution, improved auditing, and compliance.

Stamus Networks offers network-based solutions for threat detection and response. Discover serious threats and unauthorized activities lurking within your network. We use the inherent power of your network traffic to uncover critical security threats for your organization. Stamus Security Platform is a powerful network detection and response platform built on Suricata that provides actionable network visibility. Stamus Security Platform has been trusted by many of the most important organizations in the world, including government CERTs and central banks, insurance companies, managed security service providers and financial service providers.

OctoData can be deployed in Cloud hosting at a lower price and includes personalized support, from the initial definition of your needs to the actual use of the solution. OctoData is built on open-source technologies that are innovative and can adapt to new possibilities. Its Supervisor provides a management interface that allows users to quickly capture, store, and exploit increasing amounts and varieties of data. OctoData allows you to quickly prototype and industrialize massive data recovery solutions, even in real-time, in a single environment. You can get precise reports, explore new options, increase productivity, and increase profitability by leveraging your data.

Deep Text Inspection, anomaly detection and clustering. Cutting-edge AI that scans log data and streams insights, alerts. ML clustering detects new errors, unique risk KPI, and more. Pattern recognition and discovery. Anomaly detection for data and risk monitoring. Integration with Logstash and ELK, among others. AiOpsX can be deployed quickly on any log data. It also augments existing monitoring and log analysis tools with millions smart eyes. Security, performance audit, errors & issues, trends, anomalies, security, and more! Unique algorithms detect patterns and calculate risk levels. Anomaly detection continually scans performance and risk data to find outliers. The AiOpsX monitoring engine detects new types and errors, log volume changes, risk levels spikes, and triggers alerts and reports for IT monitoring teams.