Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Filebeat] Input to ingest data from WebSocket API #30991

Closed
andrewkroh opened this issue Mar 24, 2022 · 2 comments · Fixed by #37774
Closed

[Filebeat] Input to ingest data from WebSocket API #30991

andrewkroh opened this issue Mar 24, 2022 · 2 comments · Fixed by #37774
Assignees
@ShourieG
Labels
8.10-candidate enhancement Filebeat Filebeat Team:Security-Service Integrations Security Service Integrations Team

Comments

@andrewkroh
Copy link
Member

As a user I would like to be able to ingest data from an API that use a WebSocket based connection. Filebeat would establish a WebSocket connection to the server and then the server would push messages to Filebeat. Each message may be compressed (e.g. deflate, gzip).

An example API is Proofpoint. https://docs.cyderes.cloud/files/proofpoint-on-demand-log-api-rev-c.pdf
@andrewkroh andrewkroh mentioned this issue Mar 24, 2022
Closed
15 tasks
@dylanvdbrink dylanvdbrink mentioned this issue Jan 5, 2023
Closed
@ShourieG ShourieG self-assigned this Feb 8, 2023
@SpencerLN
Copy link
Contributor

+1. An input that acts as a client for a generic WebSocket server would be useful for multiple integrations. For example, I stumbled on this issue when looking for a way to ingest Certstream data.

@ShourieG ShourieG mentioned this issue Jan 29, 2024
Merged
8 tasks
@narph narph added Team:Security-Service Integrations Security Service Integrations Team and removed Team:Security-External Integrations labels Feb 8, 2024
@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ShourieG ShourieG

Labels
8.10-candidate enhancement Filebeat Filebeat Team:Security-Service Integrations Security Service Integrations Team
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[filebeat][input] - Websocket Input with CEL engine ShourieG/beats
5 participants
@narph @andrewkroh @SpencerLN @elasticmachine @ShourieG