Beats - Lightweight shippers for Elasticsearch & Logstash

go get


Travis AppVeyor GoReportCard

Beats - Lightweight shippers for Elasticsearch & Logstash

The Beats are lightweight processes, written in Go, that you install on your servers to capture all sorts of operational data like logs, operating system metrics or network packet data, and to send it to Elasticsearch, either directly or via Logstash, so it can be visualized with Kibana.

This repository contains libbeat and all the officially supported Beats, in the following folders:

Folder Description
libbeat The Go framework for creating new Beats
Topbeat Like 'top' but inserting the data into Elasticsearch
Packetbeat Tap into your wire data
Filebeat Lightweight log forwarder to Logstash & Elasticsearch
Winlogbeat Sends Windows Event logs

In addition to the above Beats, which are officially supported by Elastic, the community has created a set of other Beats that make use of libbeat but live outside of this Github repository. We maintain a list of community Beats here.

Documentation and Getting Help

You can find the documentation on the site. If you need help, you can open a topic on our discuss forums.


We'd love working with you! You can help making the Beats better in many ways: report issues, help us reproduce issues, fix bugs, add functionality, or even create your own Beat.

Please start by reading our CONTRIBUTING file.

If you are creating a new Beat, you don't need to submit the code to this repository. You can simply start working in a new repository and make use of the libbeat packages, by following our developer guide. After you have a working prototype, open a pull request to add your Beat to the list of community Beats.