elastic/ecs

Stars
920
Rank 49,655 (Top 1.0 %)
Language
Python
License
Apache License 2.0
Created over 6 years ago
Updated over 1 year ago

elastic/ecs

elastic

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Elastic Common Schema

Elastic Common Schema (ECS)

The Elastic Common Schema (ECS) defines a common set of fields for ingesting data into Elasticsearch. A common schema helps you correlate data from sources like logs and metrics or IT operations analytics and security analytics.

Documentation

The ECS reference is published on the main Elastic documentation website. Visit the official ECS Reference Documentation.

Getting Started

Please review the tooling usage guide to get started using the tools provided in this repo.

Contributing

If you're looking to contribute to ECS, you're invited to look at our contribution guide. Substantial changes to ECS are completed through our RFC process.

Generated artifacts

Various kinds of files or programs can be generated based on ECS. You can learn more in generated/README.md

Releases of ECS

The main branch of this repository should never be considered an official release of ECS. You can browse official releases of ECS here.

The ECS team publishes improvements to the schema by following Semantic Versioning. Generally major ECS releases are planned to be aligned with major Elastic Stack releases.

License

This software is licensed under the Apache License, version 2 ("ALv2"), quoted below.

Copyright 2018-2021 Elasticsearch https://www.elastic.co

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

elasticsearch

Free and Open, Distributed, RESTful Search Engine

kibana

Your window into the Elastic Stack

logstash

Logstash - transport and process your logs, events, or other data

elasticsearch-php

Official PHP client for Elasticsearch.

elasticsearch-js

Official Elasticsearch client library for Node.js

go-elasticsearch

The official Go client for Elasticsearch

elasticsearch-py

Official Python client for Elasticsearch

elasticsearch-dsl-py

High level Python client for Elasticsearch

elasticsearch-definitive-guide

The Definitive Guide to Elasticsearch

elasticsearch-net

This strongly-typed, client library enables working with Elasticsearch. It is the official client maintained and supported by Elastic.

curator

Curator: Tending your Elasticsearch indices

elasticsearch-rails

Elasticsearch integrations for ActiveModel/Record and Ruby on Rails

examples

Home for Elasticsearch examples available to everyone. It's a great way to get started.

Jupyter Notebook

cloud-on-k8s

Elastic Cloud on Kubernetes

elasticsearch-ruby

Ruby integrations for Elasticsearch

elasticsearch-hadoop

🐘 Elasticsearch real-time search and analytics natively integrated with Hadoop

detection-rules

helm-charts

You know, for Kubernetes

search-ui

Search UI. Libraries for the fast development of modern, engaging search experiences.

logstash-forwarder

An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat: https://github.com/elastic/beats/tree/master/filebeat

ansible-elasticsearch

Ansible playbook for Elasticsearch

stack-docker

Project no longer maintained.

apm-server

protections-artifacts

Elastic Security detection content for Endpoint

ember

Elastic Malware Benchmark for Empowering Researchers

Jupyter Notebook

elasticsearch-docker

Official Elasticsearch Docker image

elasticsearch-rs

Official Elasticsearch Rust Client

elasticsearch-labs

Notebooks & Example Apps for Search & AI Applications with Elasticsearch

Jupyter Notebook

elasticsearch-cloud-aws

AWS Cloud Plugin for Elasticsearch

apm-agent-nodejs

Elastic APM Node.js Agent

apm-agent-dotnet

Elastic APM .NET Agent

apm-agent-java

Elastic APM Java Agent

eland

Python Client and Toolkit for DataFrames, Big Data, Machine Learning and ETL in Elasticsearch

elasticsearch-mapper-attachments

Mapper Attachments Type plugin for Elasticsearch

elasticsearch-servicewrapper

A service wrapper on top of elasticsearch

apm-agent-go

Official Go agent for Elastic APM

sense

A JSON aware developer's interface to Elasticsearch. Comes with handy machinery such as syntax highlighting, autocomplete, formatting and code folding.

apm-agent-python

Official Python agent for Elastic APM

elastic-charts

stream2es

Stream data into ES (Wikipedia, Twitter, stdin, or other ESes)

timelion

Timelion was absorbed into Kibana 5. Don't use this. Time series composer for Elasticsearch and beyond.

apm

Elastic Application Performance Monitoring - resources and general issue tracking for Elastic APM.

elasticsearch-net-example

A tutorial repository for Elasticsearch and NEST

elasticsearch-migration

This plugin will help you to check whether you can upgrade directly to the next major version of Elasticsearch, or whether you need to make changes to your data and cluster before doing so.

logstash-docker

Official Logstash Docker image

elasticsearch-py-async

Backend for elasticsearch-py based on python's asyncio module.

support-diagnostics

Support diagnostics utility for elasticsearch and logstash

elasticsearch-java

Official Elasticsearch Java Client

es2unix

Command-line ES

elasticsearch-analysis-smartcn

Smart Chinese Analysis Plugin for Elasticsearch

dockerfiles

Dockerfiles for the official Elastic Stack images

go-sysinfo

go-sysinfo is a library for collecting system information.

kibana-docker

Official Kibana Docker image

elasticsearch-metrics-reporter-java

Metrics reporter, which reports to elasticsearch

apm-agent-php

Elastic APM PHP Agent

docs

elasticsearch-river-twitter

Twitter River Plugin for elasticsearch (STOPPED)

elasticsearch-formal-models

Formal models of core Elasticsearch algorithms

rally-tracks

Track specifications for the Elasticsearch benchmarking tool Rally

integrations

Elastic Integrations

beats-dashboards

DEPRECATED. Moved to https://github.com/elastic/beats. Please use the new repository to add new issues.

elasticsearch-analysis-icu

ICU Analysis plugin for Elasticsearch

elasticsearch-river-rabbitmq

RabbitMQ River Plugin for elasticsearch (STOPPED)

terraform-provider-ec

elasticsearch-analysis-kuromoji

Japanese (kuromoji) Analysis Plugin

dorothy

Dorothy is a tool to test security monitoring and detection for Okta environments

beats-docker

Official Beats Docker images

elasticsearch-river-couchdb

CouchDB River Plugin for elasticsearch (STOPPED)

SWAT

Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.

apm-agent-ruby

Elastic APM agent for Ruby

go-freelru

GC-less, fast and generic LRU hashmap library for Go

require-in-the-middle

Module to hook into the Node.js require function

harp

Secret management by contract toolchain

go-libaudit

go-libaudit is a library for communicating with the Linux Audit Framework.

ml-cpp

Machine learning C++ code

ecs-logging-java

Centralized logging for Java applications with the Elastic stack made easy

ansible-beats

Ansible Beats Role

logstash-contrib

THIS REPOSITORY IS NO LONGER USED.

elasticsearch-analysis-phonetic

Phonetic Analysis Plugin for Elasticsearch

azure-marketplace

Elasticsearch Azure Marketplace offering + ARM template

golang-crossbuild

elastic-agent

Elastic Agent - single, unified way to add monitoring for logs, metrics, and other types of data to a host.

anonymize-it

a general utility for anonymizing data

bpfcov

Source-code based coverage for eBPF programs actually running in the Linux kernel

windows-installers

Windows installers for the Elastic stack

terraform-provider-elasticstack

Terraform provider for Elastic Stack

makelogs

elasticsearch-lang-python

Python language Plugin for elasticsearch

stack-docs

Elastic Stack Documentation

sysgrok

LLM-driven assistant for analyzing, understanding and optimizing systems

elasticsearch-lang-javascript

JavaScript language Plugin for elasticsearch

crawler

elasticsearch-specification

Elasticsearch full specification

elasticsearch-perl

Official Perl low-level client for Elasticsearch.

next-eui-starter

Start building Kibana protoypes quickly with the Next.js EUI Starter

vue-search-ui-demo

A demo of implementing Elastic's Search UI and App Search using Vue.js

elasticsearch-transport-thrift

Thrift Transport for elasticsearch (STOPPED)

beats

🐠 Beats - Lightweight shippers for Elasticsearch & Logstash

ecs-dotnet

.NET integrations that use the Elastic Common Schema (ECS)

generator-kibana-plugin

DEPRECATED Yeoman Generator for Kibana Plugins, please use https://github.com/elastic/template-kibana-plugin/