Current ThreatQ Version Filter
Elastic (ELK) Stack Connector
The web format of this guide reflects the most current release. Guides for older iterations are available in PDF format.
Integration Details
ThreatQuotient provides the following details for this integration:
| Current Integration Version | 2.1.6 |
| Compatible with ThreatQ Versions | >= 4.24.0 |
| Python Version | 3.6 |
| Support Tier | Deprecated - Not Actively Supported |
Introduction
This connector has been deprecated and replaced with the Elastic Action.
ELK is an extremely flexible document store and search platform that ingests files and data from a myriad of sources. In today's changing cybersecurity context, ELK is becoming a popular SIEM. Given ELK's flexibility in design and ingestion of data, a bi-directional integration can be performed in many ways.
PDF Guides
| Document | ThreatQ Version |
|---|---|
| Elastic (ELK) Stack Connector Guide v2.1.6 | 4.24.0 or Greater |
| Elastic (ELK) Stack Connector Guide v2.1.3 | 4.24.0 or Greater |
| Elastic (ELK) Stack Connector Guide v2.1.2 | 4.24.0 or Greater |
| Elastic (ELK) Stack Connector Guide v2.1.1 | 4.24.0 or Greater |
| Elastic (ELK) Stack Connector Guide v2.0.0 | 4.24.0 or Greater |
| Elastic (ELK) Stack Connector Guide v1.0.1 | 4.5.0 or Greater |
| Elastic (ELK) Stack Connector Guide v1.0.0 | 4.5.0 or Greater |