integrations/packages/system/manifest.yml at 60490b96fd60a7d58f9be52b95db276649b5f32f · elastic/integrations · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
format_version: 3.4.0
name: system
title: System
version: "2.20.1"
description: Collect system logs and metrics from your servers with Elastic Agent.
type: integration
categories:
  - os_system
  # Added monitoring category as System integration collects metrics for monitoring server health
  - monitoring
  # Added observability category as System integration provides comprehensive visibility into host performance, resource utilization, and system state
  - observability
conditions:
  kibana:
    version: "^9.2.1"
screenshots:
  - src: /img/policy-and-object-monitoring-dashboard.png
    title: policy and object monitoring
    size: 600x600
    type: image/png
  - src: /img/system-and-process-activity-dashboard.png
    title: system and process activity
    size: 600x600
    type: image/png
  - src: /img/logon-activity-dashboard.png
    title: Logon Activity
    size: 600x600
    type: image/png
  - src: /img/directory-and-account-monitoring-dashboard.png
    title: directory and account monitoring dashboard
    size: 600x600
    type: image/png
  - src: /img/system-overview.png
    title: system overview
    size: 3226x1956
    type: image/png
  - src: /img/host-overview.png
    title: host overview
    size: 3258x5698
    type: image/png
icons:
  - src: /img/system.svg
    title: system
    size: 1000x1000
    type: image/svg+xml
policy_templates:
  - name: system
    title: System logs and metrics
    description: Collect logs and metrics from System instances
    inputs:
      - type: logfile
        title: Collect logs from System instances
        description: Collecting System auth and syslog logs from files
        vars:
          - name: condition
            title: Condition
            description: "Condition to filter when to apply this input. Refer to\n[Host provider](https://www.elastic.co/guide/en/fleet/current/host-provider.html)\nto find the available keys and to\n[Conditions](https://www.elastic.co/guide/en/fleet/current/dynamic-input-configuration.html#conditions)\non how to use the available keys in conditions. It defaults to\n'(${host.platform} != \"windows\") and (${host.os_version} != \"12 (bookworm)\" and ${host.os_version} != \"13 (trixie)\" and (${host.os_platform} != \"amzn\" or ${host.os_version} != \"2023\") and (${host.os_platform} != \"sles\" or (${host.os_version} != \"15 SP1\" and ${host.os_version} != \"15-SP1\" \nand ${host.os_version} != \"15 SP2\" and ${host.os_version} != \"15-SP2\" and ${host.os_version} != \"15 SP3\" and ${host.os_version} != \"15-SP3\" and ${host.os_version} != \"15 SP4\" and ${host.os_version} != \"15-SP4\" and ${host.os_version} != \"15 SP5\" and ${host.os_version} != \"15-SP5\" and ${host.os_version} != \"15 SP6\" and ${host.os_version} != \"15-SP6\" and ${host.os_version} != \"15 SP7\" and ${host.os_version} != \"15-SP7\" and ${host.os_version} != \"16.0\")))'\n"
            type: text
            multi: false
            required: false
            show_user: true
            default: (${host.platform} != "windows") and (${host.os_version} != "12 (bookworm)" and ${host.os_version} != "13 (trixie)" and (${host.os_platform} != "amzn" or ${host.os_version} != "2023") and (${host.os_platform} != "sles" or (${host.os_version} != "15 SP1" and ${host.os_version} != "15-SP1" and ${host.os_version} != "15 SP2" and ${host.os_version} != "15-SP2" and ${host.os_version} != "15 SP3" and ${host.os_version} != "15-SP3" and ${host.os_version} != "15 SP4" and ${host.os_version} != "15-SP4" and ${host.os_version} != "15 SP5" and ${host.os_version} != "15-SP5" and ${host.os_version} != "15 SP6" and ${host.os_version} != "15-SP6" and ${host.os_version} != "15 SP7" and ${host.os_version} != "15-SP7" and ${host.os_version} != "16.0")))
      - type: journald
        title: Collect logs from System instances using Journald
        description: Collecting System auth and syslog logs using Journald
        vars:
          - name: condition
            title: Condition
            description: "Condition to filter when to apply this input. Refer to\n[Host provider](https://www.elastic.co/guide/en/fleet/current/host-provider.html)\nto find the available keys and to\n[Conditions](https://www.elastic.co/guide/en/fleet/current/dynamic-input-configuration.html#conditions)\non how to use the available keys in conditions. It defaults to\n'(${host.platform} != \"windows\") and (${host.os_version} == \"12 (bookworm)\" or ${host.os_version} == \"13 (trixie)\" or (${host.os_platform} == \"amzn\" and ${host.os_version} == \"2023\") or (${host.os_platform} == \"sles\" and (${host.os_version} == \"15 SP1\" or ${host.os_version} == \"15-SP1\" \nor ${host.os_version} == \"15 SP2\" or ${host.os_version} == \"15-SP2\" or ${host.os_version} == \"15 SP3\" or ${host.os_version} == \"15-SP3\" or ${host.os_version} == \"15 SP4\" or ${host.os_version} == \"15-SP4\" or ${host.os_version} == \"15 SP5\" or ${host.os_version} == \"15-SP5\" or ${host.os_version} == \"15 SP6\" or ${host.os_version} == \"15-SP6\" or ${host.os_version} == \"15 SP7\" or ${host.os_version} == \"15-SP7\" or ${host.os_version} == \"16.0\")))'\n"
            type: text
            multi: false
            required: false
            show_user: true
            default: (${host.platform} != "windows") and (${host.os_version} == "12 (bookworm)" or ${host.os_version} == "13 (trixie)" or (${host.os_platform} == "amzn" and ${host.os_version} == "2023") or (${host.os_platform} == "sles" and (${host.os_version} == "15 SP1" or ${host.os_version} == "15-SP1" or ${host.os_version} == "15 SP2" or ${host.os_version} == "15-SP2" or ${host.os_version} == "15 SP3" or ${host.os_version} == "15-SP3" or ${host.os_version} == "15 SP4" or ${host.os_version} == "15-SP4" or ${host.os_version} == "15 SP5" or ${host.os_version} == "15-SP5" or ${host.os_version} == "15 SP6" or ${host.os_version} == "15-SP6" or ${host.os_version} == "15 SP7" or ${host.os_version} == "15-SP7" or ${host.os_version} == "16.0")))
      - type: winlog
        title: "Collect events from the Windows event log"
        description: "Collecting events from Windows event log"
      - type: system/metrics
        title: Collect metrics from System instances
        description: Collecting System core, CPU, diskio, entropy, filesystem, fsstat, load, memory, network, Network Summary, NTP, process, Process Summary, raid, service, socket, Socket Summary, uptime and users metrics
        vars:
          - name: system.hostfs
            type: text
            title: Proc Filesystem Directory
            multi: false
            required: false
            show_user: true
            description: The proc filesystem base directory.
owner:
  github: elastic/obs-infraobs-integrations
  type: elastic