Packetbeat
LogScale can be used together with Packetbeat to collect network traffic metadata. See the Packetbeat documentation for more information. You might also read their Getting Started Guide.
See the Elastic Beats.
Warning
Beats 7.16 and later Log Shippers have compatibility issues with different versions of LogScale, reporting an Invalid version from Elasticsearch error.
Beats 8.0 and higher require a configuration change to enable them to work. See Troubleshooting: Beats and Logstash Log Shippers 7.13 and higher No Longer Work with LogScale for more information.
| Beats/Logstash Version | Humio 1.36 and below | Humio 1.37 |
|---|---|---|
| Logstash 7.16 and up | Incompatible | Compatible |
| Filebeat 7 and below | Compatible | Compatible |
| Packetbeat 8.0.0 | Compatible but requires setup.ilm.enabled: false | Compatible but requires setup.ilm.enabled: false |
|
Packetbeat 8.1.0 |
Compatible but requires setup.ilm.enabled: false and output.elasticsearch.allow_older_versions: true |
Compatible but requires setup.ilm.enabled: false and output.elasticsearch.allow_older_versions: true |