Docs
  • Release notes
  • Troubleshoot
  • Reference
  1. Docs /
  2. Reference /
  3. Ingestion tools /
  4. Elastic integrations

VMware

Collect logs from various VMware products. VMware offers a wide range of products, including virtualization software, cloud management platforms, and networking solutions.

  • Carbon Black Cloud
  • Carbon Black EDR
  • vSphere
  • vSphere OpenTelemetry Assets
Previous
Vercel OpenTelemetry Integration
Next
Carbon Black Cloud
  • View as Markdown
  • Report a docs issue
  • Edit this page
  • Learn how to contribute
Get started free
  • 14-day free trial
  • All features included
  • No setup required
  • Elastic fundamentals
  • Solutions and use cases
  • Manage data
  • Explore and analyze
  • Deploy and manage
  • Manage your Cloud account
  • Troubleshoot
  • Release notes
  • Reference
  • Extend and contribute
  • Contribute to the docs
Reference Ingestion tools
  • Overview
  • Integrations quick reference
  • Managed integrations quick reference
  • 1Password
  • Abnormal Security
  • ActiveMQ
  • Active Directory Entity Analytics
  • Admin By Request EPM integration
  • Airflow
  • Airlock Digital
  • Akamai
  • Android OpenTelemetry Assets
  • Anthropic
  • Anthropic Metrics
  • Apache
    • Apache HTTP Server
    • Apache HTTP Server OpenTelemetry Input Package
    • Apache metrics from OpenTelemetry Collector
    • Apache Spark
    • Apache Tomcat
    • Tomcat NetWitness Logs
  • Apache ActiveMQ OpenTelemetry Assets
  • Apache Airflow OpenTelemetry Assets
  • Apache CouchDB OpenTelemetry Assets
  • Apache Tomcat OpenTelemetry Assets
  • Apache ZooKeeper OpenTelemetry Assets
  • API (custom)
  • Arista NG Firewall
  • Armis
  • Atlassian
    • Atlassian Bitbucket
    • Atlassian Cloud Integration for Elastic
    • Atlassian Confluence
    • Atlassian Jira
  • Auditd
    • Auditd Logs
    • Auditd Manager
  • Auth0
  • authentik
  • AWS
    • Amazon CloudFront
    • AWS CloudTrail Logs OpenTelemetry Assets
    • AWS CUR 2.0 Billing
    • Amazon DynamoDB
    • Amazon EBS
    • Amazon EC2
    • Amazon ECS
    • Amazon EMR
    • AWS API Gateway
    • AWS Config
    • Amazon GuardDuty
    • AWS Health
    • Amazon Kinesis Data Firehose
    • Amazon Kinesis Data Stream
    • Amazon MQ
    • Amazon Managed Streaming for Apache Kafka (MSK)
    • Amazon NAT Gateway
    • Amazon RDS
    • Amazon Redshift
    • Amazon S3
    • Amazon S3 Storage Lens
    • AWS Security Hub Integration for Elastic
    • Amazon Security Lake
    • Amazon SNS
    • Amazon SQS
    • Amazon VPC
    • Amazon VPN
    • AWS Bedrock
    • AWS Bedrock AgentCore
    • AWS Billing
    • AWS CloudTrail
    • AWS CloudWatch
    • AWS CloudWatch (OpenTelemetry)
    • AWS EC2 Metrics OpenTelemetry Assets
    • AWS ECS Metrics OpenTelemetry Assets
    • AWS ELB
    • AWS ELB Access Logs OpenTelemetry Assets
    • AWS ELB Metrics OpenTelemetry Assets
    • AWS Fargate
    • AWS Inspector
    • AWS Lambda
    • AWS Lambda Metrics OpenTelemetry Assets
    • AWS Logs (custom)
    • AWS Network Firewall
    • AWS RDS Metrics OpenTelemetry Assets
    • AWS Route 53
    • AWS Security Hub CSPM
    • AWS SQS Metrics OpenTelemetry Assets
    • AWS Transit Gateway
    • AWS Usage
    • AWS VPC Flow Logs OpenTelemetry Assets
    • AWS WAF
    • AWS Web Application Firewall (WAF) Logs OpenTelemetry Assets
  • Axonius Integration for Elastic
  • Azure
    • Activity logs
    • App Service
    • Application Gateway
    • Application Insights metrics
    • Application Insights metrics overview
    • Application State Insights metrics
    • Azure Activity Logs OpenTelemetry Assets
    • Azure AD Graph Activity Logs
    • Azure AI Foundry Integration
    • Azure Application Gateway OpenTelemetry Assets
    • Azure logs (v2 preview)
    • Azure OpenAI
    • Billing metrics
    • Container instance metrics
    • Container registry metrics
    • Container service metrics
    • Custom Azure Logs
    • Custom Blob Storage Input
    • Database Account metrics
    • Event Hub input
    • Firewall logs
    • Frontdoor
    • Functions
    • Microsoft Entra ID
    • Monitor metrics
    • Network Watcher VNet
    • Network Watcher NSG
    • Platform logs
    • Resource metrics
    • Spring Cloud logs
    • Storage Account metrics
    • Virtual machines metrics
    • Virtual machines scaleset metrics
  • Backstage Integration for Elastic
  • Barracuda
    • Barracuda WAF
    • CloudGen Firewall logs
  • Beelzebub Integration
  • BeyondInsight and Password Safe Integration
  • BeyondTrust EPM Integration for Elastic
  • BeyondTrust Identity Security Insights for Elastic
  • BeyondTrust PRA
  • BitDefender
  • Bitsight Integration
  • Bitwarden
  • blacklens.io
  • BBOT (Bighuge BLS OSINT Tool)
  • Box Events
  • Bravura Monitor
  • Broadcom ProxySG
  • Canva
  • Cassandra
  • Cassandra OpenTelemetry Assets
  • Cato Networks Integration for Elastic
  • CEL Custom API
  • Ceph
  • Check Point
    • Check Point Email
    • Check Point Harmony Endpoint
  • Cilium Tetragon
  • CISA Known Exploited Vulnerabilities
  • Cisco
    • Aironet
    • ASA
    • Duo
    • FTD
    • IOS
    • ISE
    • Meraki
    • Nexus
    • Secure Email Gateway
    • Secure Endpoint
    • Umbrella
  • Cisco Meraki Metrics
  • Citrix
    • ADC
    • Web App Firewall
  • Claroty CTD
  • Claroty xDome
  • Claude Code
  • Claude Cowork
  • Cloudflare
    • Cloudflare
    • Cloudflare Logpush
  • Cloud Asset Inventory
  • CockroachDB Metrics
  • CockroachDB OpenTelemetry Assets
  • Common Event Format (CEF)
  • Containerd
  • Contrast Security
  • CoreDNS
  • Corelight
  • Couchbase
  • CouchDB
  • Cribl
  • CrowdStrike
    • CrowdStrike
    • CrowdStrike Falcon Intelligence
  • Cursor
  • Cyberark
    • CyberArk EPM
    • Privileged Access Security
    • Privileged Threat Analytics
  • Cybereason
  • Cyera
  • CylanceProtect Logs
  • Cyware Intel Exchange
  • Custom Unix Logs Integration for Elastic
  • Custom Websocket logs
  • Darktrace
  • Data Exfiltration Detection
  • Dataminr Pulse Integration User Guide
  • DGA
  • Digital Guardian
  • Docker
  • Docker OpenTelemetry Assets
  • Docker OpenTelemetry Input Package
  • Doppel Integration for Elastic
  • Doppler Integration for Elastic
  • DomainTools Real Time Unified Feeds
  • Elastic APM
  • Elastic APM Intake OpenTelemetry Input Package
  • Elastic Cloud Enterprise Integration
  • Elastic Fleet Server
  • Elastic Security
    • Elastic Defend
    • Elastic Security
    • Defend for Containers
    • Prebuilt Security Detection Rules
    • Security Posture Management
    • Cloud Native Vulnerability Management (CNVM)
    • Cloud Security Posture Management (CSPM)
    • Kubernetes Security Posture Management (KSPM)
    • Threat intelligence utilities
  • Elastic Stack monitoring
    • Beats
    • Elasticsearch
    • Elastic Agent
    • Elastic Package Registry
    • Kibana
    • Logstash
  • Elasticsearch Service Billing
  • Endace
  • Entro
  • Envoy Proxy
  • Envoy Proxy OpenTelemetry Assets
  • ESET PROTECT
  • ESET Threat Intelligence
  • etcd
  • etcd OpenTelemetry Assets
  • ExtraHop
  • Falco
  • F5
    • BIG-IP
  • File Integrity Monitoring
  • File Log OpenTelemetry input
  • Filestream (custom)
  • FireEye Network Security
  • First EPSS
  • Forcepoint Web Security
  • ForgeRock
  • Forescout Integration for Elastic
  • Fortinet
    • FortiEDR Logs
    • FortiGate Firewall Logs
    • FortiMail
    • FortiManager Logs
    • Fortinet FortiProxy
  • Gigamon
  • Global Disaster Alert and Coordination System (GDACS) Integration for Elastic
  • GitHub
  • GitLab
  • Golang
  • Google
    • Google Santa
    • Google SecOps
    • Google Threat Intelligence
    • Google Workspace
  • Google Cloud
    • Custom GCS Input
    • GCP
    • GCP Audit logs
    • GCP Audit logs OpenTelemetry Assets
    • GCP Billing metrics
    • GCP Cloud Run metrics
    • GCP CloudSQL metrics
    • GCP Compute metrics
    • GCP Dataproc metrics
    • GCP DNS logs
    • GCP Firestore metrics
    • GCP Firewall logs
    • GCP GKE metrics
    • GCP Load Balancing metrics
    • GCP Metrics Input
    • GCP PubSub logs (custom)
    • GCP PubSub metrics
    • GCP Redis metrics
    • GCP Security Command Center
    • GCP Storage metrics
    • GCP VPC Flow logs
    • GCP VPC Flow logs OpenTelemetry Assets
    • GCP Vertex AI
  • GoFlow2 logs
  • Grafana Integration
  • Greenhouse Integration
  • GreyNoise
  • HackerOne Integration for Elastic
  • Hadoop
  • HAProxy
  • HAProxy OpenTelemetry Assets
  • Hashicorp Vault
  • Host Metrics OpenTelemetry Input Package
  • Host Traffic Anomalies
  • HPE Aruba CX
  • HTTP Check Integration for Elastic
  • HTTP Endpoint logs (custom)
  • IBM
    • IBM MQ
    • IBM MQ OpenTelemetry Assets
    • IBM QRadar
  • IIS
  • IIS OpenTelemetry Input Package
  • IIS metrics for OpenTelemetry Collector
  • Imperva
    • Imperva Cloud WAF
    • Imperva SecureSphere Logs
  • InfluxDb
  • InfluxDB OpenTelemetry Assets
  • Infoblox
    • BloxOne DDI
    • NIOS
    • Threat Defense
  • Iptables
  • IRONSCALES Integration for Elastic
  • Island Browser Integration for Elastic
  • Istio
  • Jaeger OpenTelemetry Input Package
  • Jamf Compliance Reporter
  • Jamf Pro
  • Jamf Protect
  • Jolokia Input
  • Journald logs (custom)
  • JumpCloud
  • JupiterOne
  • Kafka
    • Kafka
    • Kafka Connect Integration
    • Kafka Logs (custom)
    • Kafka OpenTelemetry Assets
    • Kafka OpenTelemetry Input Package
  • Keeper Security Integration
  • Keycloak
  • Kolide Integration for Elastic
  • Kubernetes
    • Kubernetes
    • API Server metrics
    • Audit logs
    • Container logs
    • Controller Manager metrics
    • Event metrics
    • Kube-state metrics
    • Kubelet metrics
    • OpenTelemetry Assets
    • Proxy metrics
    • Scheduler metrics
  • LastPass
  • Lateral Movement Detection
  • Linux Metrics
  • Living off the Land Attack Detection
  • Logs (custom)
  • Lumos
  • Lyve Cloud
  • macOS
  • macOS Unified Logs (custom)
  • Mattermost
  • Memcached
  • Memcached OpenTelemetry Assets
  • Menlo Security
  • Microsoft
    • Microsoft 365
    • Microsoft Defender for Cloud
    • Microsoft Defender for Endpoint
    • Microsoft DHCP
    • Microsoft DNS Server
    • Microsoft Entra ID Entity Analytics
    • Microsoft Exchange Online Message Trace
    • Microsoft Exchange Server
    • Microsoft Graph Activity Logs
    • Microsoft Intune Integration for Elastic
    • Microsoft Defender XDR
    • Microsoft Office 365 Metrics Integration
    • Microsoft Sentinel
    • Microsoft SQL Server
    • Microsoft SQL Server OpenTelemetry Assets
  • Mimecast
  • Miniflux integration
  • ModSecurity Audit
  • MongoDB
  • MongoDB Atlas
  • MongoDB OpenTelemetry Assets
  • MySQL
    • MySQL
    • MySQL Enterprise
    • MySQL metrics for OpenTelemetry Collector
  • MySQL OpenTelemetry Input Package
  • Nagios XI
  • NATS
  • Neon Cyber
  • NetBox Integration
  • NetFlow Records
  • Netskope
  • Network Beaconing Identification
  • Network Packet Capture
  • Nextron Thor APT Scanner
  • Nginx
    • Nginx
    • Nginx Ingress Controller Logs
    • Nginx Ingress Controller OpenTelemetry Logs
    • Nginx metrics from OpenTelemetry Collector
    • Nginx OpenTelemetry Input Package
  • Nozomi Networks
  • Nvidia GPU Monitoring
  • NVIDIA GPU OpenTelemetry Assets
  • Okta
    • Okta
    • Okta Entity Analytics
  • Oracle
    • Oracle
    • Oracle Database OTel Content Pack
    • Oracle WebLogic
  • OpenAI
  • OpenCanary
  • OpenTelemetry internal telemetry Assets
  • OpenTelemetry Profiling Integration for Elastic
  • Osquery
    • Osquery Logs
    • Osquery Manager
  • OTLP Receiver OpenTelemetry Input Package
  • Palo Alto
    • Cortex XDR
    • Networks Metrics
    • Next-Gen Firewall
    • Prisma Cloud
    • Prisma Access
  • Permission Verifier Integration
  • pfSense
  • PHP-FPM
  • PingOne
  • PingFederate
  • Pleasant Password Server
  • PostgreSQL
  • PostgreSQL OpenTelemetry Assets
  • Privileged Access Detection
  • Profilingmetrics OpenTelemetry Assets
  • Prometheus
    • Prometheus
    • Promethues Input
    • Prometheus OTel Scrape (Guided)
    • Prometheus OTel Scrape (Bring Your Own Config)
  • Proofpoint
    • Proofpoint Essentials Integration for Elastic
    • Proofpoint TAP
    • Proofpoint On Demand
    • Proofpoint Insider Threat Management (ITM)
    • Proofpoint 365 Total Protection Integration for Elastic
  • Pulse Connect Secure
  • Qualys Global AssetView (GAV)
  • Qualys VMDR
  • Qualys Web Application Scanning (WAS)
  • QNAP NAS
  • RabbitMQ Logs
  • RabbitMQ OpenTelemetry Assets
  • Rapid7
    • Rapid7 InsightVM
    • Rapid7 Threat Command
  • Redis
    • Redis
    • Redis Enterprise
    • Redis Enterprise OpenTelemetry Assets
    • Redis OpenTelemetry Assets
    • Redis OpenTelemetry Input Package
  • Rubrik RSC Metrics Integration
  • RUM OpenTelemetry Assets
  • Sailpoint Identity Security Cloud
  • Salesforce
  • Security AI Prompts
  • SentinelOne
    • SentinelOne
    • SentinelOne Cloud Funnel
  • ServiceNow
  • Slack Logs
  • Snort
  • Snyk
  • SonicWall Firewall
  • Sophos
    • Sophos
    • Sophos Central
  • Spring Boot
  • Splunk
  • SpyCloud Enterprise Protection
  • SQL Input
  • SQL Server OpenTelemetry Input Package
  • Squid Logs
  • SRX
  • STAN
  • Statsd Input
  • StatsD OpenTelemetry Input Package
  • StormShield SNS
  • Sublime Security
  • Supabase OpenTelemetry Assets
  • Supabase OpenTelemetry Integration
  • Suricata
  • Swimlane Turbine
  • Symantec
    • Endpoint Protection
  • Symantec Endpoint Security
  • Sysmon for Linux
  • Sysdig
  • Syslog Router Integration
  • System
  • System Audit
  • System OpenTelemetry Assets
  • Tanium
  • TCP Logs (custom)
  • Teleport
  • Temporal (OpenTelemetry)
  • Tenable
    • Tenable.io
    • Tenable.sc
    • Tenable OT Security
  • Tencent Cloud 集成
  • Threat intelligence
    • abuse.ch
    • AlienVault OTX
    • Anomali
    • ANY.RUN Threat Intelligence Feeds
    • Collective Intelligence Framework
    • Custom Threat Intelligence
    • Cybersixgill
    • EclecticIQ
    • Flashpoint Integration for Elastic
    • Maltiverse
    • Mandiant Advantage
    • MISP
    • OpenCTI
    • Recorded Future
    • SOCRadar Threat Feeds
    • SOCRadar Threat Intelligence (TAXII)
    • Strider Shield Integration
    • ThreatQuotient
    • Ticura Threat Intelligence Integration
  • ThreatConnect
  • Threat Map
  • Thycotic Secret Server
  • Tines
  • Traefik
  • Traefik OpenTelemetry Assets
  • Trellix
    • Trellix EDR Cloud
    • Trellix ePO Cloud
  • Trend Micro
    • Trend Micro
    • Vision One
  • TYCHON Agentless
  • UDP Logs (custom)
  • Universal Profiling
    • Universal Profiling Agent
    • Universal Profiling Collector
    • Universal Profiling Symbolizer
  • Varonis integration
  • Vectra Detect
  • Vectra RUX
  • Vercel OpenTelemetry Assets
  • Vercel OpenTelemetry Integration
  • VMware
    • Carbon Black Cloud
    • Carbon Black EDR
    • vSphere
    • vSphere OpenTelemetry Assets
  • WatchGuard Firebox
  • WebSphere Application Server
  • Windows
    • Windows
    • Custom Windows ETW logs
    • Custom WMI Input Package
    • Windows Event Logs (custom)
  • WithSecure Elements Integration
  • Wiz
  • Workday
  • XM Cyber Integration
  • Zeek
  • ZeroFox
  • Zero Networks
  • Zipkin OpenTelemetry Input Package
  • ZooKeeper Metrics
  • Zoom
  • Zscaler
    • Zscaler Internet Access
    • Zscaler Private Access
Elastic logo
  • Trademarks
  • Terms of Use
  • Privacy
  • Sitemap

© 2026 Elasticsearch B.V. All Rights Reserved.

This content is available in different formats for convenience only. All original licensing terms apply.

Elasticsearch is a trademark of Elasticsearch B.V., registered in the U.S. and in other countries. Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.