Modules [filebeat-modules]

This section contains an overview of the Filebeat modules feature as well as details about each of the currently supported modules.

Filebeat modules require Elasticsearch 5.2 or later.

::::{note} While {{filebeat}} modules are still supported, we recommend {{agent}} integrations over {{filebeat}} modules. Integrations provide a streamlined way to connect data from a variety of vendors to the {{stack}}. Refer to the full list of integrations. For more information, please refer to the {{beats}} vs {{agent}} comparison documentation. ::::

• Modules overview
• ActiveMQ module
• Apache module
• Auditd module
• AWS module
• AWS Fargate module {applies_to}stack: beta
• Azure module
• CEF module
• Check Point module
• Cisco module
• CoreDNS module
• CrowdStrike module {applies_to}stack: beta
• Cyberark PAS module
• Elasticsearch module
• Envoyproxy module
• Fortinet module
• Google Cloud Platform (GCP) module
• Google Workspace module
• HAProxy module
• IBM MQ module
• Icinga module
• IIS module
• Iptables module
• Juniper JUNOS module
• Kafka module
• Kibana module
• Logstash module
• Microsoft module
• MISP module
• MongoDB module
• MSSQL module
• MySQL module
• MySQL Enterprise module
• NATS module {applies_to}stack: beta
• NetFlow module
• Nginx module
• Office 365 module
• Okta module
• Oracle module
• Osquery module
• Palo Alto Networks module
• Pensando module
• PostgreSQL module
• RabbitMQ module
• Redis module
• Salesforce module
• Google Santa module
• Snyk module
• Sophos module
• Suricata module
• System module
• Threat Intel module
• Traefik module
• Zeek (Bro) module
• ZooKeeper module {applies_to}stack: beta
• Zoom module