The new Auditbeat System Module provides four datasets to automatically collect host, process, socket, and user information from hosts.

Learn how to architect a real-time data pipeline for network packet analysis using Wireshark, Filebeat, Logstash, Ingest Pipelines, Elasticsearch, and Kibana.

How to use the new 5.0 Ingest Node with web logs using Filebeat & Elasticsearch and build awesome dashboards quickly!

Ingest Nodes are a new feature in Elasticsearch 5 that allows you to change data right before it is indexed, e.g. extracting fields from long message strings.