Elastic integrations

Stream in logs, metrics, traces, content, and more from your apps, endpoints, infrastructure, cloud, network, workplace tools, and every other common source in your ecosystem. Send alerts to your notification tool of choice. Connect to all the systems that matter with ease.

icon-magnifying-glass

.NET
1Password
Abnormal AI
Abuse.ch Malware & URL Threat Intel
Active Directory Entity Analytics
ActiveMQ
Admin By Request EPM
Aerospike
Airflow
Airlock Digital
Akamai
AlienVault Open Threat Exchange (OTX)
Amazon Bedrock
Amazon Bedrock AgentCore
Amazon CloudFront
Amazon CloudWatch
Amazon DynamoDB
Amazon EBS
Amazon EC2
Amazon EMR
Amazon GuardDuty
Amazon Kinesis Data Firehose
Amazon MQ
Amazon RDS
Amazon Redshift
Amazon Route 53
Amazon S3
Amazon S3 Storage Lens
Amazon Security Lake
Amazon SNS
Amazon SQS
Amazon VPC
Amazon VPC NAT Gateway
Anomali ThreatStream
Anthropic
ANY.RUN
Apache
Apache Spark
Apache Tomcat
Arista Firewall
Armis
Atlassian Confluence
Atlassian Jira
auditd
Auditd Manager
Auth0
Authentik
AWS
AWS API Gateway
AWS Billing
AWS CloudTrail
AWS Config
AWS ECS
AWS Elastic Load Balancing
AWS Fargate
AWS Inspector
AWS Lambda
AWS Network Firewall
AWS Security Hub
AWS Transit Gateway
AWS Usage
AWS VPN
AWS WAF
Axonius
Azure
Azure Activity Logs
Azure AI Foundry
Azure App Service
Azure Application Gateway
Azure Application Insights
Azure Application State Insights
Azure Audit Logs
Azure Billing
Azure Blob Storage
Azure Container Instance
Azure Container Registry
Azure Container Service
Azure Database Account
Azure Event Hub
Azure Firewall
Azure Front Door
Azure Functions
Azure Monitor
Azure Network Watcher
Azure OpenAI
Azure Platform
Azure Spring Cloud
Azure Storage Account
Azure VM
Azure VM Scale Sets
Azure WAF
Barracuda CloudGen Firewall
Barracuda WAF
BBOT
Beats
Beelzebub
BeyondTrust BeyondInsight
BeyondTrust Identity Security Insights
BeyondTrust Privileged Remote Access
Bitbucket
BitDefender
Bitsight
Bitwarden
blacklens.io
Box
Box Events
Bravura Monitor
Broadcom ProxySG
Canva
Cassandra
Ceph
Check Point Email & Collaboration
Check Point Firewall
Check Point Harmony Endpoint
Cilium Tetragon
CISA Known Exploited Vulnerabilities
Cisco Aironet
Cisco ASA
Cisco Duo
Cisco Firepower Threat Defense
Cisco Identity Services Engine (ISE)
Cisco IOS
Cisco Meraki
Cisco Nexus
Cisco Secure Email Gateway
Cisco Secure Endpoint
Cisco Umbrella
Citrix ADC
Citrix Web Application Firewall
Claroty CTD
Claroty xDome
Claude Code
Cloud Foundry
Cloudflare
CockroachDB
collectd
Collective Intelligence Framework
Common Event Format (CEF)
Confluence Cloud
Confluence Data Center
Confluence Server
Consul
Containerd
Contrast Security
CoreDNS
Corelight
Couchbase
CouchDB
Cribl
CrowdStrike Falcon
CrowdStrike Falcon Intelligence
Cursor
Custom macOS Unified Logs
Custom Threat Intelligence
Custom WebSocket Input
Custom Windows event logs
Customized Connector
CyberArk EPM
CyberArk Privileged Access Security
CyberArk Privileged Threat Analytics
Cybereason
Cybersixgill
Cyera
Cyware Intel Exchange
Darktrace
Data Exfiltration Detection
Dataminr Pulse
Digital Guardian
Docker
DomainTools Real Time Unified Feeds
Doppel
Doppler
Dropbox
Dropbox Paper
Dropwizard
EclecticIQ
Elastic Agent
Elastic APM Server
Elasticsearch
Email
Endace
Endpoint Security
Entro
Envoy
ESET Protect
ESET Threat Intelligence
etcd
ExtraHop RevealX
F5 BIG-IP
Falco
Fargate
File Integrity Monitoring
FireEye Network Security
First EPSS
Flashpoint
Fleet Server
Fluentd
Forcepoint
Forcepoint Web Security
Forescout
ForgeRock
Fortinet FortiEDR
Fortinet FortiGate
Fortinet FortiMail
Fortinet FortiManager
Fortinet FortiProxy
GCP Metrics Input
GCP Vertex AI
Gigamon
GitHub
Gitlab
Gmail
Go
Go Expvar
GoFlow2
Google Cloud
Google Cloud Anthos
Google Cloud Audit
Google Cloud Billing
Google Cloud Compute
Google Cloud Dataproc
Google Cloud DNS
Google Cloud Firestore
Google Cloud Firewall
Google Cloud Functions
Google Cloud GKE
Google Cloud Load Balancing
Google Cloud Pub/Sub
Google Cloud Redis
Google Cloud Stackdriver
Google Cloud Storage
Google Cloud VPC
Google CloudSQL Metrics
Google Drive
Google Santa
Google SecOps
Google Security Command Center
Google Threat Intelligence
Google Workspace
Grafana
Graphite
GraphQL
Greenhouse
GreyNoise
HA-Proxy
HackerOne
Hadoop
Hashicorp Vault
HPE Aruba CX
HTTP
HTTP Check
IBM MQ
IBM QRadar
IBM Resilient
IBM Websphere
Icinga
ICMP Check
IIS
Imperva Cloud WAF
Imperva WAF
InfluxDB
Infoblox BloxOne DDI
Infoblox NIOS
Infoblox Threat Defense
iptables
Ironscales
Island Browser
Istio
Jaeger
Jamf Compliance Reporter
Jamf Pro
Jamf Protect
Java
JavaScript
JDBC
Jira Cloud
JIRA Data Center
Jira Server
JMS
JMX Jolokia
journald
JumpCloud
Juniper SRX Series
JupiterOne
Kafka