LogRhythm Open Collector and Beats

The LogRhythm Open Collector brings modern logs, usually in JSON format, from cloud log sources, flat file, or other formats, into the LogRhythm SIEM. It is designed for easy mapping of JSON fields to the LogRhythm Schema Dictionary and Guide. The Open Collector uses Elastic Beats to grab the data from the device and pass it along to the Open Collector, where the normalization takes place. 

Amazon Web Services (AWS) is a comprehensive cloud platform that offers more than 165 fully featured services, including: Enterprise file storage File sharing E …

Microsoft Azure Event Hubs is a fully managed, real-time data ingestion service that is simple, trusted, and scalable. It allows you to build real-time big da …

Note: The Carbon Black Cloud Beat 6.0.0 currently supports the log collection via the Alerts API only (i.e. CB Analytics alerts and Watchlists alerts). Alerts A …

Cisco Advanced Malware Protection (AMP) for Endpoints is a cloud-based software-as-a-service (SaaS) endpoint security solution. Cisco AMP connectors are deploye …

Overview Duo provides modern access security designed to safeguard all users, devices, and applications. It also adds an extra layer for authentication via two- …

Overview The goal of Gmail Message Tracking (GMT) is to enable logs for Gmail mailbox metadata, including sender, recipient, subject, message size, and attachme …

This Beat leverages the GSuite Admin SDK Reports API https://developers.google.com/admin-sdk/reports/v1/get-start/getting-started. It can be used to audit the f …

Apache Kafka is an event streaming platform Kafka is a distributed system consisting of servers and clients that communicate via a high-performance TCP network …

Okta is the leading independent provider of identity for the enterprise. The Okta Identity Cloud enables organizations to both secure and manage their extended …

Cloud Pub/Sub brings the flexibility and reliability of enterprise message-oriented middleware to the cloud. At the same time, Cloud Pub/Sub is a scalable, dura …

Sophos Central is a unified online web console for managing all your Sophos products. The available products include: Intercept X Endpoint XG Firewall Web Prote …

A webhook is a way for an application to provide real-time information to other applications. It is also referred to as a web callback or HTTP push API. A webh …

The LogRhythm Community Open Collector downloads area provides access to installation files, release notes, and community posts related to the Open Collector and Beats.

This section provides downloadable PDFs of Open Collector and Beats documentation.