Elasticsearch

This app integrates with an Elasticsearch installation to implement ingestion and investigative actions

Supported Actions

• test connectivity: Validate the asset configuration for connectivity. This action logs into the device to check the connection and credentials
• get config: Returns the list of indices and their information currently configured on the ElasticSearch instance
• run query: Run a search query on the Elasticsearch installation. Please escape any quotes that are part of the query string
• on poll: Run a query in elasticsearch and ingest the results