Community Beats

This page lists some of the Beats developed by the open source community.

Have a question about developing a community Beat? You can post questions and discuss issues in the Beats discussion forum.

Have you created a Beat that’s not listed? Add the name and description of your Beat to the source document for Community Beats and open a pull request in the Beats GitHub repository to get your change merged. When you’re ready, go ahead and announce your new Beat in the Elastic discussion forum.

amazonbeat

Reads data from a specified Amazon product.

apachebeat

Reads status from Apache HTTPD server-status.

apexbeat

Extracts configurable contextual data and metrics from Java applications via the APEX toolkit.

browserbeat

Reads and ships browser history (Chrome, Firefox, & Safari) to an Elastic output.

cborbeat

Reads from cbor encoded files (specifically log files). More: CBOR Encoding Decoder

cloudflarebeat

Indexes log entries from the Cloudflare Enterprise Log Share API.

cloudfrontbeat

Reads log events from Amazon Web Services CloudFront.

cloudtrailbeat

Reads events from Amazon Web Services' CloudTrail.

cloudwatchmetricbeat

A beat for Amazon Web Services' CloudWatch Metrics.

cloudwatchlogsbeat

Reads log events from Amazon Web Services' CloudWatch Logs.

collectbeat

Adds discovery on top of Filebeat and Metricbeat in environments like Kubernetes.

connbeat

Exposes metadata about TCP connections.

consulbeat

Reads services health checks from consul and pushes them to Elastic.

discobeat

Reads messages from Discord and indexes them in Elasticsearch

dockbeat

Reads Docker container statistics and indexes them in Elasticsearch.

earthquakebeat

Pulls data from USGS earthquake API.

elasticbeat

Reads status from an Elasticsearch cluster and indexes them in Elasticsearch.

envoyproxybeat

Reads stats from the Envoy Proxy and indexes them into Elasticsearch.

etcdbeat

Reads stats from the Etcd v2 API and indexes them into Elasticsearch.

etherbeat

Reads blocks from Ethereum compatible blockchain and indexes them into Elasticsearch.

execbeat

Periodically executes shell commands and sends the standard output and standard error to Logstash or Elasticsearch.

factbeat

Collects facts from Facter.

fastcombeat

Periodically gather internet download speed from fast.com.

fileoccurencebeat

Checks for file existence recurssively under a given directory, handy while handling queues/pipeline buffers.

flowbeat

Collects, parses, and indexes sflow samples.

gabeat

Collects data from Google Analytics Realtime API.

gcsbeat

Reads data from Google Cloud Storage buckets.

gelfbeat

Collects and parses GELF-encoded UDP messages.

githubbeat

Easily monitors GitHub repository activity.

gpfsbeat

Collects GPFS metric and quota information.

hackerbeat

Indexes the top stories of HackerNews into an ElasticSearch instance.

hsbeat

Reads all performance counters in Java HotSpot VM.

httpbeat

Polls multiple HTTP(S) endpoints and sends the data to Logstash or Elasticsearch. Supports all HTTP methods and proxies.

hsnburrowbeat

Monitors Kafka consumer lag for Burrow V1.0.0(API V3).

hwsensorsbeat

Reads sensors information from OpenBSD.

icingabeat

Icingabeat ships events and states from Icinga 2 to Elasticsearch or Logstash.

IIBBeat

Periodically executes shell commands or batch commands to collect IBM Integration node, Integration server, app status, bar file deployment time and bar file location to Logstash or Elasticsearch.

iobeat

Reads IO stats from /proc/diskstats on Linux.

jmxproxybeat

Reads Tomcat JMX metrics exposed over JMX Proxy Servlet to HTTP.

journalbeat

Used for log shipping from systemd/journald based Linux systems.

kafkabeat

Reads data from Kafka topics.

kafkabeat2

Reads data (json or plain) from Kafka topics.

krakenbeat

Collect information on each transaction on the Kraken crypto platform.

lmsensorsbeat

Collects data from lm-sensors (such as CPU temperatures, fan speeds, and voltages from i2c and smbus).

logstashbeat

Collects data from Logstash monitoring API (v5 onwards) and indexes them in Elasticsearch.

macwifibeat

Reads various indicators for a MacBook’s WiFi Signal Strength

mcqbeat

Reads the status of queues from memcacheq.

merakibeat

Collects wireless health and users location analytics data using Cisco Meraki APIs.

mesosbeat

Reads stats from the Mesos API and indexes them into Elasticsearch.

mongobeat

Monitors MongoDB instances and can be configured to send multiple document types to Elasticsearch.

mqttbeat

Add messages from mqtt topics to Elasticsearch.

mysqlbeat

Run any query on MySQL and send results to Elasticsearch.

nagioscheckbeat

For Nagios checks and performance data.

natsbeat

Collects data from NATS monitoring endpoints

netatmobeat

Reads data from Netatmo weather station.

netbeat

Reads configurable data from SNMP-enabled devices.

nginxbeat

Reads status from Nginx.

nginxupstreambeat

Reads upstream status from nginx upstream module.

nsqbeat

Reads data from a NSQ topic.

nvidiagpubeat

Uses nvidia-smi to grab metrics of NVIDIA GPUs.

o365beat

Ships Office 365 logs from the O365 Management Activities API

openconfigbeat

Streams data from OpenConfig-enabled network devices

openvpnbeat

Collects OpenVPN connection metrics

owmbeat

Open Weather Map beat to pull weather data from all around the world and store and visualize them in Elastic Stack

packagebeat

Collects information about system packages from package managers.

perfstatbeat

Collects performance metrics on the AIX operating system.

phishbeat

Monitors Certificate Transparency logs for phishing and defamatory domains.

phpfpmbeat

Reads status from PHP-FPM.

pingbeat

Sends ICMP pings to a list of targets and stores the round trip time (RTT) in Elasticsearch.

powermaxbeat

Collects performance metrics from Dell EMC PowerMax storage array.

processbeat

Collects process health status and performance.

prombeat

Indexes Prometheus metrics.

prometheusbeat

Send Prometheus metrics to Elasticsearch via the remote write feature.

protologbeat

Accepts structured and unstructured logs via UDP or TCP. Can also be used to receive syslog messages or GELF formatted messages. (To be used as a successor to udplogbeat)

pubsubbeat

Reads data from Google Cloud Pub/Sub.

redditbeat

Collects new Reddit Submissions of one or multiple Subreddits.

redisbeat

Used for Redis monitoring.

retsbeat

Collects counts of RETS resource/class records from Multiple Listing Service (MLS) servers.

rsbeat

Ships redis slow logs to elasticsearch and analyze by Kibana.

safecastbeat

Pulls data from Safecast API and store them in Elasticsearch.

saltbeat

Reads events from salt master event bus.

serialbeat

Reads from a serial device.

servicebeat

Send services status to Elasticsearch

springbeat

Collects health and metrics data from Spring Boot applications running with the actuator module.

springboot2beat

Query and accumulate all metrics endpoints of a Spring Boot 2 web app via the web channel, leveraging the mircometer.io metrics facade.

statsdbeat

Receives UDP statsd events from a statsd client.

supervisorctlbeat

This beat aims to parse the supervisorctl status command output and send it to elasticsearch for indexation

terminalbeat

Runs an external command and forwards the stdout for the same to Elasticsearch/Logstash.

timebeat

NTP and PTP clock synchonisation beat that reports accuracy metrics to elastic. Includes Kibana dashboards.

tracebeat

Reads traceroute output and indexes them into Elasticsearch.

trivybeat

Fetches Docker containers which are running on the same machine, scan CVEs of those containers using Trivy server and index them into Elasticsearch.

twitterbeat

Reads tweets for specified screen names.

udpbeat

Ships structured logs via UDP.

udplogbeat

Accept events via local UDP socket (in plain-text or JSON with ability to enforce schemas). Can also be used for applications only supporting syslog logging.

unifiedbeat

Reads records from Unified2 binary files generated by network intrusion detection software and indexes the records in Elasticsearch.

unitybeat

Collects performance metrics from Dell EMC Unity storage array.

uwsgibeat

Reads stats from uWSGI.

varnishlogbeat

Reads log data from a Varnish instance and ships it to Elasticsearch.

varnishstatbeat

Reads stats data from a Varnish instance and ships it to Elasticsearch.

vaultbeat

Collects performance metrics and statistics from Hashicorp’s Vault.

wmibeat

Uses WMI to grab your favorite, configurable Windows metrics.

yarnbeat

Polls YARN and MapReduce APIs for cluster and application metrics.

zfsbeat

Querying ZFS Storage and Pool Status