🐠 Beats - Lightweight shippers for Elasticsearch & Logstash https://www.elastic.co/products/beats
Find a file
Andrzej Stencel eff088939b
perf(otel): share instance of Beat processor between pipelines (#49518)
* feat(otel): share instance of Beat processor between pipelines

* test: refine test case

* refactor: move sharedcomponent package

* go mod tidy

* fix license header
2026-03-19 12:36:50 +00:00
.buildkite Fix the globs for collecting artifacts from failed tests (#49529) 2026-03-18 17:45:46 -04:00
.devcontainer
.github Remove author_association gates from AI trigger workflows (#49486) 2026-03-17 09:29:38 +01:00
auditbeat Bump Go version to 1.25.8 (#46793) 2026-03-06 19:18:06 +00:00
changelog Add Beats 9.2.7 release notes (#49531) (#49561) 2026-03-19 11:12:00 +01:00
deploy filebeat: deploy k8s: use compression instead of gzip_experimental (#48079) 2025-12-15 19:58:35 +01:00
dev-tools feat: reenable buildvcs (#49365) 2026-03-11 17:13:37 +01:00
docs Add Beats 9.2.7 release notes (#49531) (#49561) 2026-03-19 11:12:00 +01:00
filebeat Fix journald input for journalctl versions < 242 by omitting --boot all (#49445) 2026-03-17 18:04:33 -04:00
heartbeat [Heartbeat] Custom policy reload (#49326) 2026-03-17 18:40:02 +01:00
internal/otel/sharedcomponent perf(otel): share instance of Beat processor between pipelines (#49518) 2026-03-19 12:36:50 +00:00
libbeat convert libbeat system pprof tests to go (#49505) 2026-03-17 07:52:45 -05:00
licenses
metricbeat test(metricbeat): fix flaky NTP module unit test TestFetchOffset_Success (#49533) 2026-03-18 11:13:42 +00:00
packetbeat Avoid redundant bytes.Join in Redis request command detection (#49484) 2026-03-18 08:22:03 -05:00
script fix(script): validate test regex in stresstest (#49134) 2026-03-04 09:16:52 +01:00
testing Bump Go version to 1.25.8 (#46793) 2026-03-06 19:18:06 +00:00
tools feat: remove unused crosscompile target and gox dependency (#45555) 2025-11-04 17:18:09 +01:00
winlogbeat [winlog] move filtering to Go, harden recovery, and remove query builder (#49257) 2026-03-06 17:03:56 +01:00
x-pack perf(otel): share instance of Beat processor between pipelines (#49518) 2026-03-19 12:36:50 +00:00
.editorconfig
.gitattributes [Metricbeat] Add JetStream metricset to NATS module (#43310) 2025-05-06 09:15:23 +02:00
.gitignore
.go-version Bump Go version to 1.25.8 (#46793) 2026-03-06 19:18:06 +00:00
.golangci.yml golangci: Enable testifylint for data-plane owned code (#49008) 2026-02-25 12:29:33 +01:00
.mergify.yml ci: pin versions for the BK VM images (#48666) 2026-02-03 19:33:33 +01:00
.pre-commit-config.yaml
.pylintrc
.python-version
.updatecli-version deps: use the latest updatecli version (#45484) 2025-07-22 09:12:02 +02:00
catalog-info.yaml add DRA version bump pipeline (#48811) 2026-03-02 16:02:11 +01:00
CHANGELOG-developer.asciidoc
CHANGELOG-developer.next.asciidoc [azureblobstorage] - Make OAuth2 tests compatible with latest version of AzIdentity and AzureAD libraries (#47611) 2025-11-14 13:50:16 +05:30
CHANGELOG.asciidoc Add Beats 8.19.13 release notes (#49447) (#49549) 2026-03-18 15:38:17 -05:00
CODE_OF_CONDUCT.md conduct: fix markdown (#46247) 2025-08-27 17:30:40 +09:30
codecov.yml
config.changelog.yaml set subsections to true in config.changelog.yaml (#47326) 2025-10-27 08:52:07 -05:00
CONTRIBUTING.md
go.mod chore: update OTel Collector libraries to v0.147.0/v1.53.0 (#49348) 2026-03-13 14:57:10 +01:00
go.sum chore: update OTel Collector libraries to v0.147.0/v1.53.0 (#49348) 2026-03-13 14:57:10 +01:00
LICENSE.txt
magefile.go Remove agentbeat (#48147) 2026-01-08 10:43:56 -05:00
make.bat
Makefile Remove agentbeat (#48147) 2026-01-08 10:43:56 -05:00
NOTICE.txt chore: update OTel Collector libraries to v0.147.0/v1.53.0 (#49348) 2026-03-13 14:57:10 +01:00
pytest.ini
README.md README: Fix broken markdown link for docs CI pipeline (#49007) 2026-02-20 14:34:40 +00:00
setup.yml
updatecli-compose.yaml chore: deps(updatecli): bump "ghcr.io/elastic/oblt-updatecli-policies... (#48755) 2026-02-10 09:01:52 +01:00
Vagrantfile

Go Report Card Reviewed by Hound

Beats - The Lightweight Shippers of the Elastic Stack

The Beats are lightweight data shippers, written in Go, that you install on your servers to capture all sorts of operational data (think of logs, metrics, or network packet data). The Beats send the operational data to Elasticsearch, either directly or via Logstash, so it can be visualized with Kibana.

By "lightweight", we mean that Beats have a small installation footprint, use limited system resources, and have no runtime dependencies.

This repository contains libbeat, our Go framework for creating Beats, and all the officially supported Beats:

Beat Description
Auditbeat Collect your Linux audit framework data and monitor the integrity of your files.
Filebeat Tails and ships log files
Heartbeat Ping remote services for availability
Metricbeat Fetches sets of metrics from the operating system and services
Packetbeat Monitors the network and applications by sniffing packets
Winlogbeat Fetches and ships Windows Event logs
Osquerybeat Runs Osquery and manages interraction with it.

In addition to the above Beats, which are officially supported by Elastic, the community has created a set of other Beats that make use of libbeat but live outside of this Github repository. We maintain a list of community Beats here.

Documentation and Getting Started

You can find the documentation and getting started guides for each of the Beats on the elastic.co site:

Documentation and Getting Started information for the Elastic Agent

You can find the documentation and getting started guides for the Elastic Agent on the elastic.co site

Getting Help

If you need help or hit an issue, please start by opening a topic on our discuss forums. Please note that we reserve GitHub tickets for confirmed bugs and enhancement requests.

Downloads

You can download pre-compiled Beats binaries, as well as packages for the supported platforms, from this page.

Contributing

We'd love working with you! You can help make the Beats better in many ways: report issues, help us reproduce issues, fix bugs, add functionality, or even create your own Beat.

Please start by reading our CONTRIBUTING file.

Building Beats from the Source

See our CONTRIBUTING file for information about setting up your dev environment to build Beats from the source.

Snapshots

For testing purposes, we generate snapshot builds that you can find here. Please be aware that these are built on top of main and are not meant for production.

CI

PR Comments

It is possible to trigger some jobs by putting a comment on a GitHub PR. (This service is only available for users affiliated with Elastic and not for open-source contributors.)

PR Labels

It's possible to configure the build on a GitHub PR by labeling the PR with certain labels. Elastic users can find more details at https://docs.elastic.dev/ingest-dev-docs/beats/beats-ci.