Custom TCP Log integration
Stack Stack Serverless Observability Serverless Security
| Version | 2.0.1 (View all) |
| Subscription level What's this? |
Basic |
| Level of support What's this? |
Elastic |
The custom TCP Log package intializes a listening TCP socket that collects any TCP traffic received and sends each line as a document to Elasticsearch. Custom ingest pipelines may be added by adding the name to the pipeline configuration option, creating custom ingest pipelines can be done either through the API or the Ingest Node Pipeline UI (use the global search field to search for "ingest pipelines").
Changelog
| Version | Details | Kibana version(s) |
|---|---|---|
| 2.0.1 | Enhancement (View pull request) Changed owners. |
8.13.0 or higher 9.0.0 or higher |
| 2.0.0 | Enhancement (View pull request) Convert to input package. |
8.13.0 or higher 9.0.0 or higher |
| 1.21.0 | Enhancement (View pull request) Support stack version 9.0. |
8.2.1 or higher 9.0.0 or higher |
| 1.20.1 | Bug fix (View pull request) Updated SSL description to be uniform and to include links to documentation. |
8.2.1 or higher |
| 1.20.0 | Enhancement (View pull request) ECS version updated to 8.17.0. |
8.2.1 or higher |
| 1.19.1 | Enhancement (View pull request) Introduce option to preserve original event |
8.2.1 or higher |
| 1.19.0 | Enhancement (View pull request) Update package-spec to 3.0.3. |
8.2.1 or higher |
| 1.18.1 | Enhancement (View pull request) Changed owners |
8.2.1 or higher |
| 1.18.0 | Bug fix (View pull request) Added log.syslog.msgid and log.syslog.structured_data to ECS mapping. |
8.2.1 or higher |
| 1.17.0 | Enhancement (View pull request) ECS version updated to 8.11.0. |
8.2.1 or higher |
| 1.16.0 | Enhancement (View pull request) Update ES permissions to support reroute processors |
8.2.1 or higher |
| 1.15.0 | Enhancement (View pull request) ECS version updated to 8.10.0. |
8.2.1 or higher |
| 1.14.0 | Enhancement (View pull request) The format_version in the package manifest changed from 2.11.0 to 3.0.0. Removed dotted YAML keys from package manifest. Added 'owner.type: elastic' to package manifest. |
8.2.1 or higher |
| 1.13.0 | Enhancement (View pull request) Add tags.yml file so that integration's dashboards and saved searches are tagged with "Security Solution" and displayed in the Security Solution UI. |
8.2.1 or higher |
| 1.12.0 | Enhancement (View pull request) Update package to ECS 8.9.0. |
8.2.1 or higher |
| 1.11.0 | Enhancement (View pull request) Document duration units. |
8.2.1 or higher |
| 1.10.0 | Enhancement (View pull request) Update package to ECS 8.8.0. |
8.2.1 or higher |
| 1.9.0 | Enhancement (View pull request) Update package-spec version to 2.7.0. |
8.2.1 or higher |
| 1.8.0 | Enhancement (View pull request) Update package to ECS 8.7.0. |
8.2.1 or higher |
| 1.7.1 | Enhancement (View pull request) Added categories and/or subcategories. |
8.2.1 or higher |
| 1.7.0 | Enhancement (View pull request) Allow YAML custom configuration. |
8.2.1 or higher |
| 1.6.0 | Enhancement (View pull request) Update package to ECS 8.6.0. |
8.2.1 or higher |
| 1.5.0 | Enhancement (View pull request) Update package to ECS 8.5.0. |
8.2.1 or higher |
| 1.4.1 | Bug fix (View pull request) Fix indentation of syslog processor in agent handlebars file. |
8.2.1 or higher |
| 1.4.0 | Enhancement (View pull request) Update package to ECS 8.4.0 |
8.2.1 or higher |
| 1.3.1 | Enhancement (View pull request) Improve syslog parsing description |
8.2.1 or higher |
| 1.3.0 | Enhancement (View pull request) Add syslog parsing option |
8.2.1 or higher |
| 1.2.0 | Enhancement (View pull request) Update package to ECS 8.3.0. |
7.16.0 or higher 8.0.0 or higher |
| 1.1.0 | Enhancement (View pull request) Update to ECS 8.2 |
7.16.0 or higher 8.0.0 or higher |
| 1.0.0 | Enhancement (View pull request) Initial Release |
7.16.0 or higher 8.0.0 or higher |