From 85871e8d11290ffd783f6e7483bc5176cf91d06f Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Mon, 29 Sep 2025 16:46:32 +0200 Subject: [PATCH 01/11] Remove release-notes/apm-agents folder and ref to it --- release-notes/apm-agents/index.md | 6 ------ release-notes/apm-agents/toc.yml | 2 -- release-notes/toc.yml | 1 - 3 files changed, 9 deletions(-) delete mode 100644 release-notes/apm-agents/index.md delete mode 100644 release-notes/apm-agents/toc.yml diff --git a/release-notes/apm-agents/index.md b/release-notes/apm-agents/index.md deleted file mode 100644 index ce9df1edbf..0000000000 --- a/release-notes/apm-agents/index.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -navigation_title: Elastic APM agents ---- - -# Elastic APM agents release notes [elastic-apm--agents-release-notes] -Review the changes, fixes, and more in each version of the Elastic APM agents. \ No newline at end of file diff --git a/release-notes/apm-agents/toc.yml b/release-notes/apm-agents/toc.yml deleted file mode 100644 index f2ab236796..0000000000 --- a/release-notes/apm-agents/toc.yml +++ /dev/null @@ -1,2 +0,0 @@ -toc: - - file: index.md \ No newline at end of file diff --git a/release-notes/toc.yml b/release-notes/toc.yml index 3a4b3468cc..a7dadb1041 100644 --- a/release-notes/toc.yml +++ b/release-notes/toc.yml @@ -3,6 +3,5 @@ toc: - toc: intro - toc: elasticsearch-clients - toc: elastic-observability - - toc: apm-agents - toc: elastic-security - toc: elastic-cloud-serverless \ No newline at end of file From 092f32d6338a62b0fc74ea4400362a556d860679 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Mon, 29 Sep 2025 16:47:30 +0200 Subject: [PATCH 02/11] Add applies_to to reference/apm-agents/index.md --- reference/apm-agents/index.md | 24 +++++++++++++++--------- 1 file changed, 15 insertions(+), 9 deletions(-) diff --git a/reference/apm-agents/index.md b/reference/apm-agents/index.md index 0c8b9db93a..92f39e61cd 100644 --- a/reference/apm-agents/index.md +++ b/reference/apm-agents/index.md @@ -1,15 +1,21 @@ +--- +applies_to: + stack: ga + serverless: + observability: ga +--- + # APM agents % TO-DO: Add links to "APM basics"% This section contains reference information for APM Agents features, including: -* .NET -* Go -* Java -* Node.js -* PHP -* Python -* Ruby -* RUM JavaScript -* iOS +* [APM .NET agent](apm-agent-dotnet://reference/index.md) +* [APM Go agent](apm-agent-go://reference/index.md) +* [APM Java agent](apm-agent-java://reference/index.md) +* [APM Node.js agent](apm-agent-nodejs://reference/index.md) +* [APM PHP agent](apm-agent-php://reference/index.md) +* [APM Python agent](apm-agent-python://reference/index.md) +* [APM Ruby agent](apm-agent-ruby://reference/index.md) +* [APM RUM JavaScript agent](apm-agent-rum-js://reference/index.md) {applies_to}`serverless: unavailable` From d5171f33b2af089bd74bf0ba8eb0b991a26a5156 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Mon, 29 Sep 2025 17:28:46 +0200 Subject: [PATCH 03/11] Add applies_to to reference/ingest-tools/index.md --- reference/ingestion-tools/index.md | 29 +++++++++++++++++------------ 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/reference/ingestion-tools/index.md b/reference/ingestion-tools/index.md index f410240a62..f3eb7e126e 100644 --- a/reference/ingestion-tools/index.md +++ b/reference/ingestion-tools/index.md @@ -1,17 +1,22 @@ +--- +applies_to: + stack: ga + serverless: ga +--- + # Ingestion tools This section contains reference information for ingestion tools, including: -* Fleet and agent -* APM -* Beats -* Processor reference -* Logstash -* Logstash Plugins -* Logstash Versioned Plugin Reference -* Elastic Serverless forwarder for AWS -* Content connectors -* ES for Apache Hadoop -* Elastic in integrations +* [{{fleet}} and {{agent}}](/reference/fleet/index.md) +* [APM](/reference/apm/observability/apm.md) +* [{{beats}}](beats://reference/index.md) +* [{{ls}}](logstash://reference/index.md) +* [{{ls}} Plugins](logstash-docs-md://lsr/index.md) +* [{{ls}} Versioned Plugin Reference](logstash-docs-md://vpr/index.md) +* [Elastic Serverless Forwarder for AWS](elastic-serverless-forwarder://reference/index.md) +* [Content connectors](elasticsearch://reference/search-connectors/index.md) +* [{{es}} for Apache Hadoop](elasticsearch-hadoop://reference/index.md) +* [Elastic integrations](integration-docs://reference/index.md) -For introductory content and broader overviews, check out the [Ingest tools overview](/manage-data/ingest/tools.md) documentation. +For introductory content and broader overviews, check out [Ingest tools overview](/manage-data/ingest/tools.md). From c5ceca9973b44bf379434feec3813580b1a8bfab Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 30 Sep 2025 13:23:17 +0200 Subject: [PATCH 04/11] Add applies_to to manage-data/ingest docs --- manage-data/ingest/ingest-reference-architectures.md | 5 ++++- .../ingest/ingest-reference-architectures/agent-apis.md | 3 +++ .../ingest-reference-architectures/agent-es-airgapped.md | 4 ++++ .../ingest/ingest-reference-architectures/agent-installed.md | 3 +++ .../ingest/ingest-reference-architectures/agent-kafka-es.md | 3 +++ .../ingest-reference-architectures/agent-kafka-essink.md | 3 +++ .../ingest/ingest-reference-architectures/agent-kafka-ls.md | 3 +++ .../ingest-reference-architectures/agent-ls-airgapped.md | 4 ++++ .../ingest/ingest-reference-architectures/agent-ls.md | 3 +++ .../ingest/ingest-reference-architectures/agent-proxy.md | 3 +++ .../ingest/ingest-reference-architectures/agent-to-es.md | 3 +++ .../ingest/ingest-reference-architectures/airgapped-env.md | 4 ++++ .../ingest/ingest-reference-architectures/ls-enrich.md | 3 +++ .../ingest/ingest-reference-architectures/ls-for-input.md | 3 +++ .../ingest/ingest-reference-architectures/ls-multi.md | 3 +++ .../ingest-reference-architectures/ls-networkbridge.md | 3 +++ manage-data/ingest/ingest-reference-architectures/lspq.md | 3 +++ 17 files changed, 55 insertions(+), 1 deletion(-) diff --git a/manage-data/ingest/ingest-reference-architectures.md b/manage-data/ingest/ingest-reference-architectures.md index ae0917cebf..0bbc07d7ba 100644 --- a/manage-data/ingest/ingest-reference-architectures.md +++ b/manage-data/ingest/ingest-reference-architectures.md @@ -2,6 +2,9 @@ mapped_pages: - https://www.elastic.co/guide/en/ingest/current/index.html - https://www.elastic.co/guide/en/ingest/current/use-case-arch.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- @@ -27,5 +30,5 @@ You can host {{es}} on your own hardware or send your data to {{es}} on {{ecloud | [*{{agent}} to proxy to Elasticsearch*](./ingest-reference-architectures/agent-proxy.md)

![Image showing connections between {{agent}} and {{es}} using a proxy](/manage-data/images/ingest-ea-proxy-es.png "") | Agents have [network restrictions](./ingest-reference-architectures/agent-proxy.md) that prevent connecting outside of the {{agent}} network Note that [{{ls}} as proxy](./ingest-reference-architectures/ls-networkbridge.md) is one option.
| | [*{{agent}} to {{es}} with Kafka as middleware message queue*](./ingest-reference-architectures/agent-kafka-es.md)

![Image showing {{agent}} collecting data and using Kafka as a message queue enroute to {{es}}](/manage-data/images/ingest-ea-kafka.png "") | Kafka is your [middleware message queue](./ingest-reference-architectures/agent-kafka-es.md):

* [Kafka ES sink connector](./ingest-reference-architectures/agent-kafka-essink.md) to write from Kafka to {{es}}
* [{{ls}} to read from Kafka and route to {{es}}](./ingest-reference-architectures/agent-kafka-ls.md)
| | [*{{ls}} to Elasticsearch*](./ingest-reference-architectures/ls-for-input.md)

![Image showing {{ls}} collecting data and sending to {{es}}](/manage-data/images/ingest-ls-es.png "") | You need to collect data from a source that {{agent}} can’t read (such as databases, AWS Kinesis). Check out the [{{ls}} input plugins](logstash-docs-md://lsr/input-plugins.md).
| -| [*Elastic air-gapped architectures*](./ingest-reference-architectures/airgapped-env.md)

![Image showing {{stack}} in an air-gapped environment](/manage-data/images/ingest-ea-airgapped.png "") | You want to deploy {{agent}} and {{stack}} in an air-gapped environment (no access to outside networks)
| +| [*Elastic air-gapped architectures*](./ingest-reference-architectures/airgapped-env.md) {applies_to}`serverless: unavailable`

![Image showing {{stack}} in an air-gapped environment](/manage-data/images/ingest-ea-airgapped.png "") | You want to deploy {{agent}} and {{stack}} in an air-gapped environment (no access to outside networks)
| diff --git a/manage-data/ingest/ingest-reference-architectures/agent-apis.md b/manage-data/ingest/ingest-reference-architectures/agent-apis.md index 7fdb909beb..385235d0c9 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-apis.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-apis.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-apis.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/agent-es-airgapped.md b/manage-data/ingest/ingest-reference-architectures/agent-es-airgapped.md index 8a7b77ff27..e075423e39 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-es-airgapped.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-es-airgapped.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-es-airgapped.html +applies_to: + stack: ga + deployment: + self: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/agent-installed.md b/manage-data/ingest/ingest-reference-architectures/agent-installed.md index 94bf175b34..a75e997fba 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-installed.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-installed.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-installed.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/agent-kafka-es.md b/manage-data/ingest/ingest-reference-architectures/agent-kafka-es.md index b83a824915..524e39301f 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-kafka-es.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-kafka-es.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-kafka-es.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/agent-kafka-essink.md b/manage-data/ingest/ingest-reference-architectures/agent-kafka-essink.md index d813076401..77f3ff7199 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-kafka-essink.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-kafka-essink.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-kafka-essink.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent - id: logstash diff --git a/manage-data/ingest/ingest-reference-architectures/agent-kafka-ls.md b/manage-data/ingest/ingest-reference-architectures/agent-kafka-ls.md index d839b09b20..6cc4f1e9bb 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-kafka-ls.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-kafka-ls.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-kafka-ls.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent - id: logstash diff --git a/manage-data/ingest/ingest-reference-architectures/agent-ls-airgapped.md b/manage-data/ingest/ingest-reference-architectures/agent-ls-airgapped.md index 111727f8f3..99654151d2 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-ls-airgapped.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-ls-airgapped.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-ls-airgapped.html +applies_to: + stack: ga + deployment: + self: ga products: - id: elastic-agent - id: logstash diff --git a/manage-data/ingest/ingest-reference-architectures/agent-ls.md b/manage-data/ingest/ingest-reference-architectures/agent-ls.md index a0eaab7edd..4799f4e830 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-ls.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-ls.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-ls.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent - id: logstash diff --git a/manage-data/ingest/ingest-reference-architectures/agent-proxy.md b/manage-data/ingest/ingest-reference-architectures/agent-proxy.md index 0ae54e35cf..b9fa9aa091 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-proxy.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-proxy.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-proxy.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/agent-to-es.md b/manage-data/ingest/ingest-reference-architectures/agent-to-es.md index 698a5162b7..a252c7f7b3 100644 --- a/manage-data/ingest/ingest-reference-architectures/agent-to-es.md +++ b/manage-data/ingest/ingest-reference-architectures/agent-to-es.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/agent-to-es.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/airgapped-env.md b/manage-data/ingest/ingest-reference-architectures/airgapped-env.md index 54bda415e8..f99c0a84a0 100644 --- a/manage-data/ingest/ingest-reference-architectures/airgapped-env.md +++ b/manage-data/ingest/ingest-reference-architectures/airgapped-env.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/airgapped-env.html +applies_to: + stack: ga + deployment: + self: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/ls-enrich.md b/manage-data/ingest/ingest-reference-architectures/ls-enrich.md index 0e51bafa34..64d232fbc5 100644 --- a/manage-data/ingest/ingest-reference-architectures/ls-enrich.md +++ b/manage-data/ingest/ingest-reference-architectures/ls-enrich.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/ls-enrich.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent --- diff --git a/manage-data/ingest/ingest-reference-architectures/ls-for-input.md b/manage-data/ingest/ingest-reference-architectures/ls-for-input.md index 93f5e944ba..bd55001116 100644 --- a/manage-data/ingest/ingest-reference-architectures/ls-for-input.md +++ b/manage-data/ingest/ingest-reference-architectures/ls-for-input.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/ls-for-input.html +applies_to: + stack: ga + serverless: ga products: - id: logstash --- diff --git a/manage-data/ingest/ingest-reference-architectures/ls-multi.md b/manage-data/ingest/ingest-reference-architectures/ls-multi.md index ca7272b117..4c6bb317e7 100644 --- a/manage-data/ingest/ingest-reference-architectures/ls-multi.md +++ b/manage-data/ingest/ingest-reference-architectures/ls-multi.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/ls-multi.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent - id: logstash diff --git a/manage-data/ingest/ingest-reference-architectures/ls-networkbridge.md b/manage-data/ingest/ingest-reference-architectures/ls-networkbridge.md index 65c96f3bca..1a15e8e352 100644 --- a/manage-data/ingest/ingest-reference-architectures/ls-networkbridge.md +++ b/manage-data/ingest/ingest-reference-architectures/ls-networkbridge.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/ls-networkbridge.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent - id: logstash diff --git a/manage-data/ingest/ingest-reference-architectures/lspq.md b/manage-data/ingest/ingest-reference-architectures/lspq.md index 6ce4e9c735..be285a4f06 100644 --- a/manage-data/ingest/ingest-reference-architectures/lspq.md +++ b/manage-data/ingest/ingest-reference-architectures/lspq.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/ingest/current/lspq.html +applies_to: + stack: ga + serverless: ga products: - id: elastic-agent - id: logstash From 2e71c2b979a14101843513c4ca73145648e79c4f Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 30 Sep 2025 14:53:26 +0200 Subject: [PATCH 05/11] Add applies_to to agent processor docs --- reference/fleet/add-cloud-metadata-processor.md | 2 ++ reference/fleet/add_cloudfoundry_metadata-processor.md | 2 ++ reference/fleet/add_docker_metadata-processor.md | 2 ++ reference/fleet/add_fields-processor.md | 2 ++ reference/fleet/add_host_metadata-processor.md | 2 ++ reference/fleet/add_id-processor.md | 2 ++ reference/fleet/add_kubernetes_metadata-processor.md | 2 ++ reference/fleet/add_labels-processor.md | 2 ++ reference/fleet/add_locale-processor.md | 2 ++ reference/fleet/add_network_direction-processor.md | 2 ++ reference/fleet/add_nomad_metadata-processor.md | 2 ++ reference/fleet/add_observer_metadata-processor.md | 2 ++ reference/fleet/add_process_metadata-processor.md | 2 ++ reference/fleet/add_tags-processor.md | 2 ++ reference/fleet/agent-processors.md | 2 ++ reference/fleet/community_id-processor.md | 2 ++ reference/fleet/convert-processor.md | 2 ++ reference/fleet/copy_fields-processor.md | 2 ++ reference/fleet/decode-json-fields.md | 2 ++ reference/fleet/decode_base64_field-processor.md | 2 ++ reference/fleet/decode_cef-processor.md | 2 ++ reference/fleet/decode_csv_fields-processor.md | 2 ++ reference/fleet/decode_duration-processor.md | 2 ++ reference/fleet/decode_xml-processor.md | 2 ++ reference/fleet/decode_xml_wineventlog-processor.md | 2 ++ reference/fleet/decompress_gzip_field-processor.md | 2 ++ reference/fleet/detect_mime_type-processor.md | 2 ++ reference/fleet/dissect-processor.md | 2 ++ reference/fleet/dns-processor.md | 2 ++ reference/fleet/drop_event-processor.md | 2 ++ reference/fleet/drop_fields-processor.md | 2 ++ reference/fleet/extract_array-processor.md | 2 ++ reference/fleet/fingerprint-processor.md | 2 ++ reference/fleet/include_fields-processor.md | 2 ++ reference/fleet/move_fields-processor.md | 2 ++ reference/fleet/processor-parse-aws-vpc-flow-log.md | 2 ++ reference/fleet/processor-syntax.md | 2 ++ reference/fleet/rate_limit-processor.md | 2 ++ reference/fleet/registered_domain-processor.md | 2 ++ reference/fleet/rename-processor.md | 2 ++ reference/fleet/replace-fields.md | 2 ++ reference/fleet/script-processor.md | 2 ++ reference/fleet/syslog-processor.md | 2 ++ reference/fleet/timestamp-processor.md | 2 ++ reference/fleet/translate_sid-processor.md | 2 ++ reference/fleet/truncate_fields-processor.md | 2 ++ reference/fleet/urldecode-processor.md | 2 ++ 47 files changed, 94 insertions(+) diff --git a/reference/fleet/add-cloud-metadata-processor.md b/reference/fleet/add-cloud-metadata-processor.md index ea6fb3b0c0..c954228f27 100644 --- a/reference/fleet/add-cloud-metadata-processor.md +++ b/reference/fleet/add-cloud-metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_cloud_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add-cloud-metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_cloudfoundry_metadata-processor.md b/reference/fleet/add_cloudfoundry_metadata-processor.md index 5dac686bda..17dd7d496c 100644 --- a/reference/fleet/add_cloudfoundry_metadata-processor.md +++ b/reference/fleet/add_cloudfoundry_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_cloudfoundry_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_cloudfoundry_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_docker_metadata-processor.md b/reference/fleet/add_docker_metadata-processor.md index 449a1adca3..30bee8540a 100644 --- a/reference/fleet/add_docker_metadata-processor.md +++ b/reference/fleet/add_docker_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_docker_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_docker_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_fields-processor.md b/reference/fleet/add_fields-processor.md index 598e927366..18c2d84660 100644 --- a/reference/fleet/add_fields-processor.md +++ b/reference/fleet/add_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: add_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_host_metadata-processor.md b/reference/fleet/add_host_metadata-processor.md index 0dc514c6fe..f5059fb5ef 100644 --- a/reference/fleet/add_host_metadata-processor.md +++ b/reference/fleet/add_host_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_host_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_host_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_id-processor.md b/reference/fleet/add_id-processor.md index 6093c4e2cc..8063964faf 100644 --- a/reference/fleet/add_id-processor.md +++ b/reference/fleet/add_id-processor.md @@ -2,6 +2,8 @@ navigation_title: add_id mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_id-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_kubernetes_metadata-processor.md b/reference/fleet/add_kubernetes_metadata-processor.md index 66ba4085af..448fbb233e 100644 --- a/reference/fleet/add_kubernetes_metadata-processor.md +++ b/reference/fleet/add_kubernetes_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_kubernetes_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_kubernetes_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_labels-processor.md b/reference/fleet/add_labels-processor.md index 94b5842c40..a1b3582dde 100644 --- a/reference/fleet/add_labels-processor.md +++ b/reference/fleet/add_labels-processor.md @@ -2,6 +2,8 @@ navigation_title: add_labels mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_labels-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_locale-processor.md b/reference/fleet/add_locale-processor.md index c066248813..ea03485f15 100644 --- a/reference/fleet/add_locale-processor.md +++ b/reference/fleet/add_locale-processor.md @@ -2,6 +2,8 @@ navigation_title: add_locale mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_locale-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_network_direction-processor.md b/reference/fleet/add_network_direction-processor.md index a50885d041..4ee5be884c 100644 --- a/reference/fleet/add_network_direction-processor.md +++ b/reference/fleet/add_network_direction-processor.md @@ -2,6 +2,8 @@ navigation_title: add_network_direction mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_network_direction-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_nomad_metadata-processor.md b/reference/fleet/add_nomad_metadata-processor.md index f467a3bd6a..93089af936 100644 --- a/reference/fleet/add_nomad_metadata-processor.md +++ b/reference/fleet/add_nomad_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_nomad_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_nomad_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_observer_metadata-processor.md b/reference/fleet/add_observer_metadata-processor.md index 32ff5fb570..addff59a72 100644 --- a/reference/fleet/add_observer_metadata-processor.md +++ b/reference/fleet/add_observer_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_observer_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_observer_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_process_metadata-processor.md b/reference/fleet/add_process_metadata-processor.md index aaa2cfbb30..8ba88081c0 100644 --- a/reference/fleet/add_process_metadata-processor.md +++ b/reference/fleet/add_process_metadata-processor.md @@ -2,6 +2,8 @@ navigation_title: add_process_metadata mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_process_metadata-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add_tags-processor.md b/reference/fleet/add_tags-processor.md index f27c59ffd2..85342fe9cd 100644 --- a/reference/fleet/add_tags-processor.md +++ b/reference/fleet/add_tags-processor.md @@ -2,6 +2,8 @@ navigation_title: add_tags mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add_tags-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/agent-processors.md b/reference/fleet/agent-processors.md index d562ee3fa1..a174062b2b 100644 --- a/reference/fleet/agent-processors.md +++ b/reference/fleet/agent-processors.md @@ -1,6 +1,8 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/elastic-agent-processor-configuration.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/community_id-processor.md b/reference/fleet/community_id-processor.md index 09737b4a28..8f1c6d7b57 100644 --- a/reference/fleet/community_id-processor.md +++ b/reference/fleet/community_id-processor.md @@ -2,6 +2,8 @@ navigation_title: community_id mapped_pages: - https://www.elastic.co/guide/en/fleet/current/community_id-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/convert-processor.md b/reference/fleet/convert-processor.md index e727a526a9..b0474bd4fa 100644 --- a/reference/fleet/convert-processor.md +++ b/reference/fleet/convert-processor.md @@ -2,6 +2,8 @@ navigation_title: convert mapped_pages: - https://www.elastic.co/guide/en/fleet/current/convert-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/copy_fields-processor.md b/reference/fleet/copy_fields-processor.md index ab6479821d..22d5749c92 100644 --- a/reference/fleet/copy_fields-processor.md +++ b/reference/fleet/copy_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: copy_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/copy_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode-json-fields.md b/reference/fleet/decode-json-fields.md index e2b2defc08..1d1909b8cc 100644 --- a/reference/fleet/decode-json-fields.md +++ b/reference/fleet/decode-json-fields.md @@ -2,6 +2,8 @@ navigation_title: decode_json_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode-json-fields.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode_base64_field-processor.md b/reference/fleet/decode_base64_field-processor.md index eda199928a..87c1ea9cdf 100644 --- a/reference/fleet/decode_base64_field-processor.md +++ b/reference/fleet/decode_base64_field-processor.md @@ -2,6 +2,8 @@ navigation_title: decode_base64_field mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode_base64_field-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode_cef-processor.md b/reference/fleet/decode_cef-processor.md index 3ef81a5810..66c8e3b74a 100644 --- a/reference/fleet/decode_cef-processor.md +++ b/reference/fleet/decode_cef-processor.md @@ -2,6 +2,8 @@ navigation_title: decode_cef mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode_cef-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode_csv_fields-processor.md b/reference/fleet/decode_csv_fields-processor.md index 71da35f1c3..e10a2c7f88 100644 --- a/reference/fleet/decode_csv_fields-processor.md +++ b/reference/fleet/decode_csv_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: decode_csv_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode_csv_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode_duration-processor.md b/reference/fleet/decode_duration-processor.md index 86774bdc5e..4a5ea6940e 100644 --- a/reference/fleet/decode_duration-processor.md +++ b/reference/fleet/decode_duration-processor.md @@ -2,6 +2,8 @@ navigation_title: decode_duration mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode_duration-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode_xml-processor.md b/reference/fleet/decode_xml-processor.md index 61d4241d1a..9d9b8c1f87 100644 --- a/reference/fleet/decode_xml-processor.md +++ b/reference/fleet/decode_xml-processor.md @@ -2,6 +2,8 @@ navigation_title: decode_xml mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode_xml-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decode_xml_wineventlog-processor.md b/reference/fleet/decode_xml_wineventlog-processor.md index 068ac5d3ad..36e02caf49 100644 --- a/reference/fleet/decode_xml_wineventlog-processor.md +++ b/reference/fleet/decode_xml_wineventlog-processor.md @@ -2,6 +2,8 @@ navigation_title: decode_xml_wineventlog mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decode_xml_wineventlog-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/decompress_gzip_field-processor.md b/reference/fleet/decompress_gzip_field-processor.md index 9adc7c5611..05a00dac31 100644 --- a/reference/fleet/decompress_gzip_field-processor.md +++ b/reference/fleet/decompress_gzip_field-processor.md @@ -2,6 +2,8 @@ navigation_title: decompress_gzip_field mapped_pages: - https://www.elastic.co/guide/en/fleet/current/decompress_gzip_field-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/detect_mime_type-processor.md b/reference/fleet/detect_mime_type-processor.md index 15546dbcd8..282f2e865c 100644 --- a/reference/fleet/detect_mime_type-processor.md +++ b/reference/fleet/detect_mime_type-processor.md @@ -2,6 +2,8 @@ navigation_title: detect_mime_type mapped_pages: - https://www.elastic.co/guide/en/fleet/current/detect_mime_type-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/dissect-processor.md b/reference/fleet/dissect-processor.md index 84ac3927ce..d9ae234b54 100644 --- a/reference/fleet/dissect-processor.md +++ b/reference/fleet/dissect-processor.md @@ -2,6 +2,8 @@ navigation_title: dissect mapped_pages: - https://www.elastic.co/guide/en/fleet/current/dissect-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/dns-processor.md b/reference/fleet/dns-processor.md index 53eba085bb..b66a84bdd0 100644 --- a/reference/fleet/dns-processor.md +++ b/reference/fleet/dns-processor.md @@ -2,6 +2,8 @@ navigation_title: dns mapped_pages: - https://www.elastic.co/guide/en/fleet/current/dns-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/drop_event-processor.md b/reference/fleet/drop_event-processor.md index ee6cb97d3f..0aeb288f88 100644 --- a/reference/fleet/drop_event-processor.md +++ b/reference/fleet/drop_event-processor.md @@ -2,6 +2,8 @@ navigation_title: drop_event mapped_pages: - https://www.elastic.co/guide/en/fleet/current/drop_event-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/drop_fields-processor.md b/reference/fleet/drop_fields-processor.md index 35bbd7cf7c..c6c46f43dc 100644 --- a/reference/fleet/drop_fields-processor.md +++ b/reference/fleet/drop_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: drop_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/drop_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/extract_array-processor.md b/reference/fleet/extract_array-processor.md index 0462640ef4..32ca9fd4e2 100644 --- a/reference/fleet/extract_array-processor.md +++ b/reference/fleet/extract_array-processor.md @@ -2,6 +2,8 @@ navigation_title: extract_array mapped_pages: - https://www.elastic.co/guide/en/fleet/current/extract_array-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/fingerprint-processor.md b/reference/fleet/fingerprint-processor.md index c5b467f842..363197ad05 100644 --- a/reference/fleet/fingerprint-processor.md +++ b/reference/fleet/fingerprint-processor.md @@ -2,6 +2,8 @@ navigation_title: fingerprint mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fingerprint-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/include_fields-processor.md b/reference/fleet/include_fields-processor.md index 60cd32711c..45ed50801c 100644 --- a/reference/fleet/include_fields-processor.md +++ b/reference/fleet/include_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: include_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/include_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/move_fields-processor.md b/reference/fleet/move_fields-processor.md index 817910e309..09fbaf7288 100644 --- a/reference/fleet/move_fields-processor.md +++ b/reference/fleet/move_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: move_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/move_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/processor-parse-aws-vpc-flow-log.md b/reference/fleet/processor-parse-aws-vpc-flow-log.md index 7bccf04753..1c00d8cefa 100644 --- a/reference/fleet/processor-parse-aws-vpc-flow-log.md +++ b/reference/fleet/processor-parse-aws-vpc-flow-log.md @@ -2,6 +2,8 @@ navigation_title: parse_aws_vpc_flow_log mapped_pages: - https://www.elastic.co/guide/en/fleet/current/processor-parse-aws-vpc-flow-log.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/processor-syntax.md b/reference/fleet/processor-syntax.md index b3775ad7cb..c471d1eaa6 100644 --- a/reference/fleet/processor-syntax.md +++ b/reference/fleet/processor-syntax.md @@ -1,6 +1,8 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/processor-syntax.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/rate_limit-processor.md b/reference/fleet/rate_limit-processor.md index 66e92a8f15..a94b650517 100644 --- a/reference/fleet/rate_limit-processor.md +++ b/reference/fleet/rate_limit-processor.md @@ -2,6 +2,8 @@ navigation_title: rate_limit mapped_pages: - https://www.elastic.co/guide/en/fleet/current/rate_limit-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/registered_domain-processor.md b/reference/fleet/registered_domain-processor.md index f601989011..ad9857ef0e 100644 --- a/reference/fleet/registered_domain-processor.md +++ b/reference/fleet/registered_domain-processor.md @@ -2,6 +2,8 @@ navigation_title: registered_domain mapped_pages: - https://www.elastic.co/guide/en/fleet/current/registered_domain-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/rename-processor.md b/reference/fleet/rename-processor.md index 224ca2cec7..5ce877552b 100644 --- a/reference/fleet/rename-processor.md +++ b/reference/fleet/rename-processor.md @@ -2,6 +2,8 @@ navigation_title: rename mapped_pages: - https://www.elastic.co/guide/en/fleet/current/rename-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/replace-fields.md b/reference/fleet/replace-fields.md index 2c192a473c..5dff1ede0a 100644 --- a/reference/fleet/replace-fields.md +++ b/reference/fleet/replace-fields.md @@ -2,6 +2,8 @@ navigation_title: replace mapped_pages: - https://www.elastic.co/guide/en/fleet/current/replace-fields.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/script-processor.md b/reference/fleet/script-processor.md index 95ffd9e6e9..6b64f41d8e 100644 --- a/reference/fleet/script-processor.md +++ b/reference/fleet/script-processor.md @@ -2,6 +2,8 @@ navigation_title: script mapped_pages: - https://www.elastic.co/guide/en/fleet/current/script-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/syslog-processor.md b/reference/fleet/syslog-processor.md index b156113acb..aa6c95daaa 100644 --- a/reference/fleet/syslog-processor.md +++ b/reference/fleet/syslog-processor.md @@ -2,6 +2,8 @@ navigation_title: syslog mapped_pages: - https://www.elastic.co/guide/en/fleet/current/syslog-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/timestamp-processor.md b/reference/fleet/timestamp-processor.md index 5accfc2d5b..93eedcaf2a 100644 --- a/reference/fleet/timestamp-processor.md +++ b/reference/fleet/timestamp-processor.md @@ -2,6 +2,8 @@ navigation_title: timestamp mapped_pages: - https://www.elastic.co/guide/en/fleet/current/timestamp-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/translate_sid-processor.md b/reference/fleet/translate_sid-processor.md index 197267dcb7..e5285802b7 100644 --- a/reference/fleet/translate_sid-processor.md +++ b/reference/fleet/translate_sid-processor.md @@ -2,6 +2,8 @@ navigation_title: translate_sid mapped_pages: - https://www.elastic.co/guide/en/fleet/current/translate_sid-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/truncate_fields-processor.md b/reference/fleet/truncate_fields-processor.md index ab917ff994..a1ddbef8f2 100644 --- a/reference/fleet/truncate_fields-processor.md +++ b/reference/fleet/truncate_fields-processor.md @@ -2,6 +2,8 @@ navigation_title: truncate_fields mapped_pages: - https://www.elastic.co/guide/en/fleet/current/truncate_fields-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/urldecode-processor.md b/reference/fleet/urldecode-processor.md index 6974926787..25d57b5177 100644 --- a/reference/fleet/urldecode-processor.md +++ b/reference/fleet/urldecode-processor.md @@ -2,6 +2,8 @@ navigation_title: urldecode mapped_pages: - https://www.elastic.co/guide/en/fleet/current/urldecode-processor.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent From 54fef881ae87301232d04e63e761cf581727de14 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 30 Sep 2025 17:14:24 +0200 Subject: [PATCH 06/11] Add applies_to to more pages --- reference/fleet/agent-command-reference.md | 3 +++ reference/fleet/beats-agent-comparison.md | 6 ++++++ .../fleet-agent-serverless-restrictions.md | 2 +- reference/fleet/migrate-auditbeat-to-agent.md | 19 +++++++++++-------- .../migrate-from-beats-to-elastic-agent.md | 3 +++ 5 files changed, 24 insertions(+), 9 deletions(-) diff --git a/reference/fleet/agent-command-reference.md b/reference/fleet/agent-command-reference.md index ca53ea9487..eaca600f01 100644 --- a/reference/fleet/agent-command-reference.md +++ b/reference/fleet/agent-command-reference.md @@ -2,6 +2,9 @@ navigation_title: Command reference mapped_pages: - https://www.elastic.co/guide/en/fleet/current/elastic-agent-cmd-options.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/beats-agent-comparison.md b/reference/fleet/beats-agent-comparison.md index 4f9e7b49fb..f835fbb59a 100644 --- a/reference/fleet/beats-agent-comparison.md +++ b/reference/fleet/beats-agent-comparison.md @@ -1,6 +1,12 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/beats-agent-comparison.html +applies_to: + stack: ga +products: + - id: beats + - id: fleet + - id: elastic-agent --- # {{beats}} and {{agent}} capabilities diff --git a/reference/fleet/fleet-agent-serverless-restrictions.md b/reference/fleet/fleet-agent-serverless-restrictions.md index cb9ced6ece..be841eb746 100644 --- a/reference/fleet/fleet-agent-serverless-restrictions.md +++ b/reference/fleet/fleet-agent-serverless-restrictions.md @@ -3,7 +3,7 @@ navigation_title: Restrictions for {{serverless-full}} mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fleet-agent-serverless-restrictions.html applies_to: - serverless: all + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/migrate-auditbeat-to-agent.md b/reference/fleet/migrate-auditbeat-to-agent.md index e980059761..cc34eb563f 100644 --- a/reference/fleet/migrate-auditbeat-to-agent.md +++ b/reference/fleet/migrate-auditbeat-to-agent.md @@ -1,14 +1,17 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/migrate-auditbeat-to-agent.html +applies_to: + stack: ga products: + - id: auditbeat - id: fleet - id: elastic-agent --- # Migrate from Auditbeat to Elastic Agent [migrate-auditbeat-to-agent] -Before you begin, read [*Migrate from {{beats}} to {{agent}}*](/reference/fleet/migrate-from-beats-to-elastic-agent.md) to learn how to deploy {{agent}} and install integrations. +Before you begin, read [Migrate from {{beats}} to {{agent}}](/reference/fleet/migrate-from-beats-to-elastic-agent.md) to learn how to deploy {{agent}} and install integrations. Then come back to this page to learn about the integrations available to replace functionality provided by {{auditbeat}}. @@ -24,9 +27,9 @@ The following table describes the integrations you can use instead of {{auditbea | If you use… | You can use this instead… | Notes | | --- | --- | --- | -| [Auditd](beats://reference/auditbeat/auditbeat-module-auditd.md) module | [Auditd Manager](integration-docs://reference/auditd_manager/index.md) integration | This integration is a direct replacement of the module. You can port rules andconfiguration to this integration. Starting in {{stack}} 8.4, you can also set the`immutable` flag in the audit configuration. | -| [Auditd Logs](integration-docs://reference/auditd/index.md) integration | Use this integration if you don’t need to manage rules. It only parses logs fromthe audit daemon `auditd`. Note that the events created by this integrationare different than the ones created by[Auditd Manager](integration-docs://reference/auditd_manager/index.md), since the latter merges allrelated messages in a single event while [Auditd Logs](integration-docs://reference/auditd/index.md)creates one event per message. | -| [File Integrity](beats://reference/auditbeat/auditbeat-module-file_integrity.md) module | [File Integrity Monitoring](integration-docs://reference/fim/index.md) integration | This integration is a direct replacement of the module. It reports real-timeevents, but cannot report who made the changes. If you need to track thisinformation, use [{{elastic-defend}}](/solutions/security/configure-elastic-defend/install-elastic-defend.md) instead. | +| [Auditd](beats://reference/auditbeat/auditbeat-module-auditd.md) module | [Auditd Manager](integration-docs://reference/auditd_manager/index.md) integration | This integration is a direct replacement of the module. You can port rules and configuration to this integration. Starting in {{stack}} 8.4, you can also set the`immutable` flag in the audit configuration. | +| [Auditd Logs](integration-docs://reference/auditd/index.md) integration | Use this integration if you don’t need to manage rules. It only parses logs from the audit daemon `auditd`. Note that the events created by this integration are different than the ones created by [Auditd Manager](integration-docs://reference/auditd_manager/index.md), since the latter merges all related messages in a single event while [Auditd Logs](integration-docs://reference/auditd/index.md)creates one event per message. | +| [File Integrity](beats://reference/auditbeat/auditbeat-module-file_integrity.md) module | [File Integrity Monitoring](integration-docs://reference/fim/index.md) integration | This integration is a direct replacement of the module. It reports real-time events, but cannot report who made the changes. If you need to track this information, use [{{elastic-defend}}](/solutions/security/configure-elastic-defend/install-elastic-defend.md) instead. | | [System](beats://reference/auditbeat/auditbeat-module-system.md) module | It depends… | There is not a single integration that collects all this information. | | [System.host](beats://reference/auditbeat/auditbeat-dataset-system-host.md) dataset | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Schedule collection of information like:

* [system_info](https://www.osquery.io/schema/5.1.0/#system_info) for hostname, unique ID, and architecture
* [os_version](https://www.osquery.io/schema/5.1.0/#os_version)
* [interface_addresses](https://www.osquery.io/schema/5.1.0/#interface_addresses) for IPs and MACs
| | [System.login](beats://reference/auditbeat/auditbeat-dataset-system-login.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Report login events. | @@ -34,10 +37,10 @@ The following table describes the integrations you can use instead of {{auditbea | {{fleet}} [system](integration-docs://reference/system/index.md) integration | Collect login events for Windows through the [Security event log](integration-docs://reference/system/index.md#security). | | [System.package](beats://reference/auditbeat/auditbeat-dataset-system-package.md) dataset | [System Audit](integration-docs://reference/system_audit/index.md) integration | This integration is a direct replacement of the System Package dataset. Starting in {{stack}} 8.7, you can port rules and configuration settings to this integration. This integration currently schedules collection of information such as:

* [rpm_packages](https://www.osquery.io/schema/5.1.0/#rpm_packages)
* [deb_packages](https://www.osquery.io/schema/5.1.0/#deb_packages)
* [homebrew_packages](https://www.osquery.io/schema/5.1.0/#homebrew_packages)
| | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Schedule collection of information like:

* [rpm_packages](https://www.osquery.io/schema/5.1.0/#rpm_packages)
* [deb_packages](https://www.osquery.io/schema/5.1.0/#deb_packages)
* [homebrew_packages](https://www.osquery.io/schema/5.1.0/#homebrew_packages)
* [apps](https://www.osquery.io/schema/5.1.0/#apps) (MacOS)
* [programs](https://www.osquery.io/schema/5.1.0/#programs) (Windows)
* [npm_packages](https://www.osquery.io/schema/5.1.0/#npm_packages)
* [atom_packages](https://www.osquery.io/schema/5.1.0/#atom_packages)
* [chocolatey_packages](https://www.osquery.io/schema/5.1.0/#chocolatey_packages)
* [portage_packages](https://www.osquery.io/schema/5.1.0/#portage_packages)
* [python_packages](https://www.osquery.io/schema/5.1.0/#python_packages)
| -| [System.process](beats://reference/auditbeat/auditbeat-dataset-system-process.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because out of the box it reports events forevery process in [ECS](integration-docs://reference/index.md) format and has excellentintegration in [Kibana](/get-started/the-stack.md). | +| [System.process](beats://reference/auditbeat/auditbeat-dataset-system-process.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because out of the box it reports events for every process in [ECS](integration-docs://reference/index.md) format and has excellent integration in [Kibana](/get-started/the-stack.md). | | [Custom Windows event log](integration-docs://reference/winlog/index.md) and [Sysmon](integration-docs://reference/sysmon_linux/index.md) integrations | Provide process data. | -| [Osquery](integration-docs://reference/osquery/index.md) or[Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Collect data from the [process](https://www.osquery.io/schema/5.1.0/#process) table on some OSeswithout polling. | -| [System.socket](beats://reference/auditbeat/auditbeat-dataset-system-socket.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because it supports monitoring network connections on Linux,Windows, and MacOS. Includes process and user metadata. Currently does notdo flow accounting (byte and packet counts) or domain name enrichment (but doescollect DNS queries separately). | -| [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor socket events via the [socket_events](https://www.osquery.io/schema/5.1.0/#socket_events) tablefor Linux and MacOS. | +| [Osquery](integration-docs://reference/osquery/index.md) or[Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Collect data from the [process](https://www.osquery.io/schema/5.1.0/#process) table on some operation systems without polling. | +| [System.socket](beats://reference/auditbeat/auditbeat-dataset-system-socket.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because it supports monitoring network connections on Linux,Windows, and MacOS. Includes process and user metadata. Currently does not do flow accounting (byte and packet counts) or domain name enrichment (but doescollect DNS queries separately). | +| [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor socket events via the [socket_events](https://www.osquery.io/schema/5.1.0/#socket_events) table for Linux and MacOS. | | [System.user](beats://reference/auditbeat/auditbeat-dataset-system-user.md) dataset | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor local users via the [user](https://www.osquery.io/schema/5.1.0/#user) table for Linux, Windows, and MacOS. | diff --git a/reference/fleet/migrate-from-beats-to-elastic-agent.md b/reference/fleet/migrate-from-beats-to-elastic-agent.md index 72bc0a0f1f..3f18745c1e 100644 --- a/reference/fleet/migrate-from-beats-to-elastic-agent.md +++ b/reference/fleet/migrate-from-beats-to-elastic-agent.md @@ -1,7 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/migrate-beats-to-agent.html +applies_to: + stack: ga products: + - id: beats - id: fleet - id: elastic-agent --- From 892d352cd651a71836e47909648a70320007e8a8 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 30 Sep 2025 18:31:29 +0200 Subject: [PATCH 07/11] Add applies_to to 'Manage integrations' docs --- reference/fleet/add-integration-to-policy.md | 3 +++ reference/fleet/data-streams-advanced-features.md | 3 +++ reference/fleet/data-streams-ilm-tutorial.md | 2 ++ reference/fleet/data-streams-pipeline-tutorial.md | 3 +++ reference/fleet/data-streams-scenario1.md | 2 ++ reference/fleet/data-streams-scenario2.md | 2 ++ reference/fleet/data-streams-scenario3.md | 2 ++ reference/fleet/data-streams-scenario4.md | 1 - reference/fleet/data-streams.md | 3 +++ reference/fleet/edit-delete-integration-policy.md | 3 +++ reference/fleet/install-uninstall-integration-assets.md | 3 +++ reference/fleet/integration-level-outputs.md | 3 +++ reference/fleet/integrations-assets-best-practices.md | 3 +++ reference/fleet/manage-integrations.md | 3 +++ reference/fleet/managed-integrations-content.md | 3 +++ reference/fleet/package-signatures.md | 3 +++ reference/fleet/upgrade-integration.md | 3 +++ reference/fleet/view-integration-assets.md | 3 +++ reference/fleet/view-integration-policies.md | 3 +++ 19 files changed, 50 insertions(+), 1 deletion(-) diff --git a/reference/fleet/add-integration-to-policy.md b/reference/fleet/add-integration-to-policy.md index 4e96db1640..c9431e9aee 100644 --- a/reference/fleet/add-integration-to-policy.md +++ b/reference/fleet/add-integration-to-policy.md @@ -2,6 +2,9 @@ navigation_title: Add an integration to an {{agent}} policy mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add-integration-to-policy.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-advanced-features.md b/reference/fleet/data-streams-advanced-features.md index e32cc577ee..bee8f3226e 100644 --- a/reference/fleet/data-streams-advanced-features.md +++ b/reference/fleet/data-streams-advanced-features.md @@ -2,6 +2,9 @@ navigation_title: Advanced data stream features mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams-advanced-features.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-ilm-tutorial.md b/reference/fleet/data-streams-ilm-tutorial.md index f4e293e3c2..fc41b36b4e 100644 --- a/reference/fleet/data-streams-ilm-tutorial.md +++ b/reference/fleet/data-streams-ilm-tutorial.md @@ -1,6 +1,8 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams-ilm-tutorial.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-pipeline-tutorial.md b/reference/fleet/data-streams-pipeline-tutorial.md index 053a6671a0..dc1657e0b9 100644 --- a/reference/fleet/data-streams-pipeline-tutorial.md +++ b/reference/fleet/data-streams-pipeline-tutorial.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams-pipeline-tutorial.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-scenario1.md b/reference/fleet/data-streams-scenario1.md index 3caa3f741b..5fc3e40cfd 100644 --- a/reference/fleet/data-streams-scenario1.md +++ b/reference/fleet/data-streams-scenario1.md @@ -2,6 +2,8 @@ navigation_title: Scenario 1 mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams-scenario1.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-scenario2.md b/reference/fleet/data-streams-scenario2.md index c8a1cfe201..c4b55a8649 100644 --- a/reference/fleet/data-streams-scenario2.md +++ b/reference/fleet/data-streams-scenario2.md @@ -2,6 +2,8 @@ navigation_title: Scenario 2 mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams-scenario2.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-scenario3.md b/reference/fleet/data-streams-scenario3.md index 499cc220e7..9581324968 100644 --- a/reference/fleet/data-streams-scenario3.md +++ b/reference/fleet/data-streams-scenario3.md @@ -2,6 +2,8 @@ navigation_title: Scenario 3 mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams-scenario3.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/data-streams-scenario4.md b/reference/fleet/data-streams-scenario4.md index c78c12db2c..090d40903f 100644 --- a/reference/fleet/data-streams-scenario4.md +++ b/reference/fleet/data-streams-scenario4.md @@ -7,7 +7,6 @@ products: - id: elastic-agent applies_to: stack: ga 9.1 - serverless: ga --- # Scenario 4: Apply an ILM policy to all data streams in a custom integration [data-streams-scenario4] diff --git a/reference/fleet/data-streams.md b/reference/fleet/data-streams.md index f3d89cc1c7..9fe7f157ad 100644 --- a/reference/fleet/data-streams.md +++ b/reference/fleet/data-streams.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/data-streams.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/edit-delete-integration-policy.md b/reference/fleet/edit-delete-integration-policy.md index 95257a023d..fb943b542a 100644 --- a/reference/fleet/edit-delete-integration-policy.md +++ b/reference/fleet/edit-delete-integration-policy.md @@ -2,6 +2,9 @@ navigation_title: Edit or delete an integration policy mapped_pages: - https://www.elastic.co/guide/en/fleet/current/edit-or-delete-integration-policy.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/install-uninstall-integration-assets.md b/reference/fleet/install-uninstall-integration-assets.md index 51c160a84a..bc3a30eba6 100644 --- a/reference/fleet/install-uninstall-integration-assets.md +++ b/reference/fleet/install-uninstall-integration-assets.md @@ -2,6 +2,9 @@ navigation_title: Install and uninstall integration assets mapped_pages: - https://www.elastic.co/guide/en/fleet/current/install-uninstall-integration-assets.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/integration-level-outputs.md b/reference/fleet/integration-level-outputs.md index 574df5321b..a89530bf52 100644 --- a/reference/fleet/integration-level-outputs.md +++ b/reference/fleet/integration-level-outputs.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/integration-level-outputs.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/integrations-assets-best-practices.md b/reference/fleet/integrations-assets-best-practices.md index 83e63c578d..f5be3ae747 100644 --- a/reference/fleet/integrations-assets-best-practices.md +++ b/reference/fleet/integrations-assets-best-practices.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/integrations-assets-best-practices.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/manage-integrations.md b/reference/fleet/manage-integrations.md index 9f1671bd05..6306ba1d7e 100644 --- a/reference/fleet/manage-integrations.md +++ b/reference/fleet/manage-integrations.md @@ -2,6 +2,9 @@ navigation_title: Manage integrations mapped_pages: - https://www.elastic.co/guide/en/fleet/current/integrations.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/managed-integrations-content.md b/reference/fleet/managed-integrations-content.md index 47f99aff28..88c053f5a6 100644 --- a/reference/fleet/managed-integrations-content.md +++ b/reference/fleet/managed-integrations-content.md @@ -2,6 +2,9 @@ navigation_title: Managed integrations content mapped_pages: - https://www.elastic.co/guide/en/fleet/current/managed-integrations-content.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/package-signatures.md b/reference/fleet/package-signatures.md index ef6275de42..4466c33e35 100644 --- a/reference/fleet/package-signatures.md +++ b/reference/fleet/package-signatures.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/package-signatures.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/upgrade-integration.md b/reference/fleet/upgrade-integration.md index 50f5513c25..dfd8e15045 100644 --- a/reference/fleet/upgrade-integration.md +++ b/reference/fleet/upgrade-integration.md @@ -2,6 +2,9 @@ navigation_title: Upgrade an integration mapped_pages: - https://www.elastic.co/guide/en/fleet/current/upgrade-integration.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/view-integration-assets.md b/reference/fleet/view-integration-assets.md index c4b66d11a9..fe258d0464 100644 --- a/reference/fleet/view-integration-assets.md +++ b/reference/fleet/view-integration-assets.md @@ -2,6 +2,9 @@ navigation_title: View integration assets mapped_pages: - https://www.elastic.co/guide/en/fleet/current/view-integration-assets.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/view-integration-policies.md b/reference/fleet/view-integration-policies.md index 831882d337..3a5e6c0e4d 100644 --- a/reference/fleet/view-integration-policies.md +++ b/reference/fleet/view-integration-policies.md @@ -2,6 +2,9 @@ navigation_title: View integration policies mapped_pages: - https://www.elastic.co/guide/en/fleet/current/view-integration-policies.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent From eb2303a125a23d11f06bc10c8c3f486be4f8cdaa Mon Sep 17 00:00:00 2001 From: Visha Angelova <91186315+vishaangelova@users.noreply.github.com> Date: Tue, 30 Sep 2025 18:41:26 +0200 Subject: [PATCH 08/11] Update reference/fleet/migrate-auditbeat-to-agent.md --- reference/fleet/migrate-auditbeat-to-agent.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reference/fleet/migrate-auditbeat-to-agent.md b/reference/fleet/migrate-auditbeat-to-agent.md index cc34eb563f..2c91b88cba 100644 --- a/reference/fleet/migrate-auditbeat-to-agent.md +++ b/reference/fleet/migrate-auditbeat-to-agent.md @@ -39,7 +39,7 @@ The following table describes the integrations you can use instead of {{auditbea | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Schedule collection of information like:

* [rpm_packages](https://www.osquery.io/schema/5.1.0/#rpm_packages)
* [deb_packages](https://www.osquery.io/schema/5.1.0/#deb_packages)
* [homebrew_packages](https://www.osquery.io/schema/5.1.0/#homebrew_packages)
* [apps](https://www.osquery.io/schema/5.1.0/#apps) (MacOS)
* [programs](https://www.osquery.io/schema/5.1.0/#programs) (Windows)
* [npm_packages](https://www.osquery.io/schema/5.1.0/#npm_packages)
* [atom_packages](https://www.osquery.io/schema/5.1.0/#atom_packages)
* [chocolatey_packages](https://www.osquery.io/schema/5.1.0/#chocolatey_packages)
* [portage_packages](https://www.osquery.io/schema/5.1.0/#portage_packages)
* [python_packages](https://www.osquery.io/schema/5.1.0/#python_packages)
| | [System.process](beats://reference/auditbeat/auditbeat-dataset-system-process.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because out of the box it reports events for every process in [ECS](integration-docs://reference/index.md) format and has excellent integration in [Kibana](/get-started/the-stack.md). | | [Custom Windows event log](integration-docs://reference/winlog/index.md) and [Sysmon](integration-docs://reference/sysmon_linux/index.md) integrations | Provide process data. | -| [Osquery](integration-docs://reference/osquery/index.md) or[Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Collect data from the [process](https://www.osquery.io/schema/5.1.0/#process) table on some operation systems without polling. | +| [Osquery](integration-docs://reference/osquery/index.md) or[Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Collect data from the [process](https://www.osquery.io/schema/5.1.0/#process) table on some operating systems without polling. | | [System.socket](beats://reference/auditbeat/auditbeat-dataset-system-socket.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because it supports monitoring network connections on Linux,Windows, and MacOS. Includes process and user metadata. Currently does not do flow accounting (byte and packet counts) or domain name enrichment (but doescollect DNS queries separately). | | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor socket events via the [socket_events](https://www.osquery.io/schema/5.1.0/#socket_events) table for Linux and MacOS. | | [System.user](beats://reference/auditbeat/auditbeat-dataset-system-user.md) dataset | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor local users via the [user](https://www.osquery.io/schema/5.1.0/#user) table for Linux, Windows, and MacOS. | From 9a6160d6297f7e6ed170cb52e7445e71508ee662 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Wed, 1 Oct 2025 10:45:38 +0200 Subject: [PATCH 09/11] Add applies_to to 'Deployment models' docs --- reference/fleet/add-fleet-server-cloud.md | 4 ++++ reference/fleet/add-fleet-server-kubernetes.md | 3 +++ reference/fleet/add-fleet-server-mixed.md | 5 +++++ reference/fleet/add-fleet-server-on-prem.md | 6 +++++- reference/fleet/deployment-models.md | 7 +++++++ reference/fleet/fleet-server-monitoring.md | 4 ++++ reference/fleet/fleet-server-scalability.md | 14 +++++++++----- reference/fleet/fleet-server-secrets.md | 3 +++ reference/fleet/fleet-server.md | 3 +++ reference/fleet/secret-files-guide.md | 3 +++ 10 files changed, 46 insertions(+), 6 deletions(-) diff --git a/reference/fleet/add-fleet-server-cloud.md b/reference/fleet/add-fleet-server-cloud.md index 6c41761bcf..f55a1edb6d 100644 --- a/reference/fleet/add-fleet-server-cloud.md +++ b/reference/fleet/add-fleet-server-cloud.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add-fleet-server-cloud.html +applies_to: + deployment: + ess: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add-fleet-server-kubernetes.md b/reference/fleet/add-fleet-server-kubernetes.md index 1386b96a8b..36ed8ad13a 100644 --- a/reference/fleet/add-fleet-server-kubernetes.md +++ b/reference/fleet/add-fleet-server-kubernetes.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add-fleet-server-kubernetes.html +applies_to: + deployment: + self: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add-fleet-server-mixed.md b/reference/fleet/add-fleet-server-mixed.md index c6c999a38e..37463bbddb 100644 --- a/reference/fleet/add-fleet-server-mixed.md +++ b/reference/fleet/add-fleet-server-mixed.md @@ -1,6 +1,11 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add-fleet-server-mixed.html +applies_to: + deployment: + ece: ga + self: ga + ess: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/add-fleet-server-on-prem.md b/reference/fleet/add-fleet-server-on-prem.md index eaec79e59e..5a434a13a3 100644 --- a/reference/fleet/add-fleet-server-on-prem.md +++ b/reference/fleet/add-fleet-server-on-prem.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/add-fleet-server-on-prem.html +applies_to: + deployment: + ece: ga + self: ga products: - id: fleet - id: elastic-agent @@ -55,7 +59,7 @@ You can install only a single {{agent}} per host, which means you cannot run {{f Before deploying, you need to: -* Obtain or generate a Cerfiticate Authority (CA) certificate. +* Obtain or generate a Certificate Authority (CA) certificate. * Ensure components have access to the ports needed for communication. diff --git a/reference/fleet/deployment-models.md b/reference/fleet/deployment-models.md index f8cd7fb99b..ccce2bfd31 100644 --- a/reference/fleet/deployment-models.md +++ b/reference/fleet/deployment-models.md @@ -1,6 +1,13 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fleet-deployment-models.html +applies_to: + deployment: + ece: ga + eck: ga + self: ga + ess: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/fleet-server-monitoring.md b/reference/fleet/fleet-server-monitoring.md index cbb196a31e..a9641950b9 100644 --- a/reference/fleet/fleet-server-monitoring.md +++ b/reference/fleet/fleet-server-monitoring.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fleet-server-monitoring.html +applies_to: + deployment: + self: ga + ece: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/fleet-server-scalability.md b/reference/fleet/fleet-server-scalability.md index dabf92f37f..e674fe55c6 100644 --- a/reference/fleet/fleet-server-scalability.md +++ b/reference/fleet/fleet-server-scalability.md @@ -1,6 +1,10 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fleet-server-scalability.html +applies_to: + deployment: + ess: ga + serverless: ga products: - id: fleet - id: elastic-agent @@ -139,7 +143,7 @@ Deprecated: Use the `action_limit` settings instead. : How frequently agents can submit status requests to the Fleet Server. `status_limit.burst` -: Burst of status requests to accomodate before falling back to the rate defined by interval. +: Burst of status requests to accommodate before falling back to the rate defined by interval. `status_limit.max_body_byte_size` : Maximum size in bytes of the status API request body. @@ -151,7 +155,7 @@ Deprecated: Use the `action_limit` settings instead. : How frequently agents can submit file start upload requests to the Fleet Server. `upload_start_limit.burst` -: Burst of file start upload requests to accomodate before falling back to the rate defined by interval. +: Burst of file start upload requests to accommodate before falling back to the rate defined by interval. `upload_start_limit.max_body_byte_size` : Maximum size in bytes of the uploadStart API request body. @@ -163,7 +167,7 @@ Deprecated: Use the `action_limit` settings instead. : How frequently agents can submit file end upload requests to the Fleet Server. `upload_end_limit.burst` -: Burst of file end upload requests to accomodate before falling back to the rate defined by interval. +: Burst of file end upload requests to accommodate before falling back to the rate defined by interval. `upload_end_limit.max_body_byte_size` : Maximum size in bytes of the uploadEnd API request body. @@ -175,7 +179,7 @@ Deprecated: Use the `action_limit` settings instead. : How frequently agents can submit file chunk upload requests to the Fleet Server. `upload_chunk_limit.burst` -: Burst of file chunk upload requests to accomodate before falling back to the rate defined by interval. +: Burst of file chunk upload requests to accommodate before falling back to the rate defined by interval. `upload_chunk_limit.max_body_byte_size` : Maximum size in bytes of the uploadChunk API request body. @@ -183,7 +187,7 @@ Deprecated: Use the `action_limit` settings instead. ## Scaling recommendations ({{ecloud}}) [scaling-recommendations] -The following tables provide the minimum resource requirements and scaling guidelines based on the number of agents required by your deployment. It should be noted that these compute resource can be spread across multiple availability zones (for example: a 32GB RAM requirement can be satisfed with 16GB of RAM in 2 different zones). +The following tables provide the minimum resource requirements and scaling guidelines based on the number of agents required by your deployment. It should be noted that these compute resource can be spread across multiple availability zones (for example: a 32GB RAM requirement can be satisfied with 16GB of RAM in 2 different zones). * [Resource requirements by number of agents](#resource-requirements-by-number-agents) diff --git a/reference/fleet/fleet-server-secrets.md b/reference/fleet/fleet-server-secrets.md index 362703238b..e9f6569f3f 100644 --- a/reference/fleet/fleet-server-secrets.md +++ b/reference/fleet/fleet-server-secrets.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fleet-server-secrets.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/fleet-server.md b/reference/fleet/fleet-server.md index 49e94ea0eb..96b95df6f9 100644 --- a/reference/fleet/fleet-server.md +++ b/reference/fleet/fleet-server.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/fleet-server.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/secret-files-guide.md b/reference/fleet/secret-files-guide.md index cdeec4a295..8ef2cbb115 100644 --- a/reference/fleet/secret-files-guide.md +++ b/reference/fleet/secret-files-guide.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/secret-files-guide.html +applies_to: + stack: ga + serverless: ga products: - id: fleet - id: elastic-agent From dd42150d0bcf6197456b0447b96b73da31cc7e5b Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Wed, 1 Oct 2025 11:06:52 +0200 Subject: [PATCH 10/11] Fix more typos --- .../ingest-reference-architectures/ls-multi.md | 2 +- reference/fleet/add-cloud-metadata-processor.md | 2 +- .../fleet/add_cloudfoundry_metadata-processor.md | 2 +- reference/fleet/add_docker_metadata-processor.md | 2 +- reference/fleet/agent-command-reference.md | 2 +- reference/fleet/community_id-processor.md | 2 +- reference/fleet/data-streams-ilm-tutorial.md | 2 +- reference/fleet/data-streams.md | 2 +- reference/fleet/detect_mime_type-processor.md | 2 +- reference/fleet/hints-annotations-autodiscovery.md | 2 +- reference/fleet/ingest-pipeline-kubernetes.md | 2 +- .../fleet/integrations-assets-best-practices.md | 4 ++-- reference/fleet/migrate-auditbeat-to-agent.md | 2 +- reference/fleet/processor-parse-aws-vpc-flow-log.md | 2 +- reference/fleet/script-processor.md | 12 ++++++------ reference/fleet/timestamp-processor.md | 2 +- reference/fleet/upgrade-standalone.md | 4 ++-- 17 files changed, 24 insertions(+), 24 deletions(-) diff --git a/manage-data/ingest/ingest-reference-architectures/ls-multi.md b/manage-data/ingest/ingest-reference-architectures/ls-multi.md index 4c6bb317e7..ce5067f741 100644 --- a/manage-data/ingest/ingest-reference-architectures/ls-multi.md +++ b/manage-data/ingest/ingest-reference-architectures/ls-multi.md @@ -22,7 +22,7 @@ Use when : Data collected by {{agent}} needs to be routed to different {{es}} clusters or non-{{es}} destinations depending on the content Example -: Let’s take an example of a Windows workstation, for which we are collecting different types of logs using the System and Windows integrations. These logs need to be sent to different {{es}} clusters and to S3 for backup and a mechanism to send it to other destinations such as different SIEM solutions. In addition, the {{es}} destination is derived based on the type of datastream and an organization identifier. +: Let’s take an example of a Windows workstation, for which we are collecting different types of logs using the System and Windows integrations. These logs need to be sent to different {{es}} clusters and to S3 for backup and a mechanism to send it to other destinations such as different SIEM solutions. In addition, the {{es}} destination is derived based on the type of data stream and an organization identifier. In such use cases, agents send the data to {{ls}} as a routing mechanism to different destinations. Note that the System and Windows integrations must be installed on all {{es}} clusters to which the data is routed. diff --git a/reference/fleet/add-cloud-metadata-processor.md b/reference/fleet/add-cloud-metadata-processor.md index c954228f27..cb9d087a31 100644 --- a/reference/fleet/add-cloud-metadata-processor.md +++ b/reference/fleet/add-cloud-metadata-processor.md @@ -55,7 +55,7 @@ The metadata that is added to events varies by hosting provider. For examples, r | --- | --- | --- | --- | | `timeout` | No | `3s` | Maximum amount of time to wait for a successful response when detecting the hosting provider. If a timeout occurs, no instance metadata is added to the events. This makes it possible to enable this processor for all your deployments (in the cloud or on-premise). | | `providers` | No | | List of provider names to use. If `providers` is not configured, all providers that do not access a remote endpoint are enabled by default. The list of providers may alternatively be configured with the environment variable `BEATS_ADD_CLOUD_METADATA_PROVIDERS`, by setting it to a comma-separated list of provider names.

The list of supported provider names includes:

* `alibaba` or `ecs` for the Alibaba Cloud provider (disabled by default).
* `azure` for Azure Virtual Machine (enabled by default).
* `digitalocean` for Digital Ocean (enabled by default).
* `aws` or `ec2` for Amazon Web Services (enabled by default).
* `gcp` for Google Compute Engine (enabled by default).
* `openstack` or `nova` for Openstack Nova (enabled by default).
* `openstack-ssl` or `nova-ssl` for Openstack Nova when SSL metadata APIs are enabled (enabled by default).
* `tencent` or `qcloud` for Tencent Cloud (disabled by default).
* `huawei` for Huawei Cloud (enabled by default).
| -| `overwrite` | No | `false` | Whether to overwrite existing cloud fields. If `true`, the processoroverwrites existing `cloud.*` fields. | +| `overwrite` | No | `false` | Whether to overwrite existing cloud fields. If `true`, the processor overwrites existing `cloud.*` fields. | The `add_cloud_metadata` processor supports SSL options to configure the http client used to query cloud metadata. diff --git a/reference/fleet/add_cloudfoundry_metadata-processor.md b/reference/fleet/add_cloudfoundry_metadata-processor.md index 17dd7d496c..eff66cc692 100644 --- a/reference/fleet/add_cloudfoundry_metadata-processor.md +++ b/reference/fleet/add_cloudfoundry_metadata-processor.md @@ -66,5 +66,5 @@ For efficient annotation, application metadata retrieved by the Cloud Foundry cl | `client_secret` | Yes | | Client Secret to authenticate with Cloud Foundry. | | `cache_duration` | No | `120s` | Maximum amount of time to cache an application’s metadata. | | `cache_retry_delay` | No | `20s` | Time to wait before trying to obtain an application’s metadata again in case of error. | -| `ssl` | No | | SSL configuration to use when connecting to Cloud Foundry. For a list ofavailable settings, refer to [SSL/TLS](/reference/fleet/elastic-agent-ssl-configuration.md), specificallythe settings under [Table 7, Common configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#common-ssl-options) and [Table 8, Client configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#client-ssl-options). | +| `ssl` | No | | SSL configuration to use when connecting to Cloud Foundry. For a list of available settings, refer to [SSL/TLS](/reference/fleet/elastic-agent-ssl-configuration.md), specifically the settings under [Table 7, Common configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#common-ssl-options) and [Table 8, Client configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#client-ssl-options). | diff --git a/reference/fleet/add_docker_metadata-processor.md b/reference/fleet/add_docker_metadata-processor.md index 30bee8540a..cbd47d0c2a 100644 --- a/reference/fleet/add_docker_metadata-processor.md +++ b/reference/fleet/add_docker_metadata-processor.md @@ -74,7 +74,7 @@ If the Docker daemon is restarted, the mounted socket will become invalid, and m | Name | Required | Default | Description | | --- | --- | --- | --- | | `host` | No | `unix:///var/run/docker.sock` | Docker socket (UNIX or TCP socket). | -| `ssl` | No | | SSL configuration to use when connecting to the Docker socket. For a list ofavailable settings, refer to [SSL/TLS](/reference/fleet/elastic-agent-ssl-configuration.md), specificallythe settings under [Table 7, Common configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#common-ssl-options) and [Table 8, Client configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#client-ssl-options). | +| `ssl` | No | | SSL configuration to use when connecting to the Docker socket. For a list of available settings, refer to [SSL/TLS](/reference/fleet/elastic-agent-ssl-configuration.md), specifically the settings under [Table 7, Common configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#common-ssl-options) and [Table 8, Client configuration options](/reference/fleet/elastic-agent-ssl-configuration.md#client-ssl-options). | | `match_fields` | No | | List of fields to match a container ID. At least one of the fields most hold a container ID to get the event enriched. | | `match_pids` | No | `["process.pid", "process.parent.pid"]` | List of fields that contain process IDs. If the process is running in Docker, the event will be enriched. | | `match_source` | No | `true` | Whether to match the container ID from a log path present in the `log.file.path` field. | diff --git a/reference/fleet/agent-command-reference.md b/reference/fleet/agent-command-reference.md index eaca600f01..d35703686e 100644 --- a/reference/fleet/agent-command-reference.md +++ b/reference/fleet/agent-command-reference.md @@ -441,7 +441,7 @@ elastic-agent inspect components [--show-config] : Use to display the configuration in all units. `--show-spec` - : Use to get input/output runtime spectification for a component. + : Use to get input/output runtime specification for a component. `--help` diff --git a/reference/fleet/community_id-processor.md b/reference/fleet/community_id-processor.md index 8f1c6d7b57..7de3427795 100644 --- a/reference/fleet/community_id-processor.md +++ b/reference/fleet/community_id-processor.md @@ -55,5 +55,5 @@ If the necessary fields are not present in the event, the processor silently con | --- | --- | --- | --- | | `fields` | No | | Field names that the processor reads from:

`source_ip`
: Field containing the source IP address.

`source_port`
: Field containing the source port.

`destination_ip`
: Field containing the destination IP address.

`destination_port`
: Field containing the destination port.

`iana_number`
: Field containing the IANA number. The following protocol numbers are currently supported: 1 ICMP, 2 IGMP, 6 TCP, 17 UDP, 47 GRE, 58 ICMP IPv6, 88 EIGRP, 89 OSPF, 103 PIM, and 132 SCTP.

`transport`
: Field containing the transport protocol. Used only when the `iana_number` field is not present.

`icmp_type`
: Field containing the ICMP type.

`icmp_code`
: Field containing the ICMP code.
| | `target` | No | | Field that the computed hash is written to. | -| `seed` | No | | Seed for the community ID hash. Must be between 0 and 65535 (inclusive). Theseed can prevent hash collisions between network domains, such as a staging andproduction network that use the same addressing scheme. This setting results ina 16-bit unsigned integer that gets incorporated into all generated hashes. | +| `seed` | No | | Seed for the community ID hash. Must be between 0 and 65535 (inclusive). The seed can prevent hash collisions between network domains, such as a staging and production network that use the same addressing scheme. This setting results ina 16-bit unsigned integer that gets incorporated into all generated hashes. | diff --git a/reference/fleet/data-streams-ilm-tutorial.md b/reference/fleet/data-streams-ilm-tutorial.md index fc41b36b4e..4ba6015394 100644 --- a/reference/fleet/data-streams-ilm-tutorial.md +++ b/reference/fleet/data-streams-ilm-tutorial.md @@ -17,7 +17,7 @@ These tutorials explain how to apply a custom {{ilm-init}} policy to an integrat For certain features you’ll need to use a slightly different procedure to manage the index lifecycle: -* APM: For verions 8.15 and later, refer to [Index lifecycle management](/solutions/observability/apm/index-lifecycle-management.md). +* APM: For versions 8.15 and later, refer to [Index lifecycle management](/solutions/observability/apm/index-lifecycle-management.md). * Synthetic monitoring: Refer to [Manage data retention](/solutions/observability/synthetics/manage-data-retention.md). * Universal Profiling: Refer to [Universal Profiling index life cycle management](/solutions/observability/infra-and-hosts/universal-profiling-index-life-cycle-management.md). diff --git a/reference/fleet/data-streams.md b/reference/fleet/data-streams.md index 9fe7f157ad..a029003893 100644 --- a/reference/fleet/data-streams.md +++ b/reference/fleet/data-streams.md @@ -97,7 +97,7 @@ When you install an integration, {{fleet}} creates two default `@custom` compone * A `@custom` component template allowing customization across all documents of a given data stream type, named following the pattern: `@custom`. * A `@custom` component template for each data stream, named following the pattern: `@custom`. -The `@custom` component template specific to a datastream has higher precedence over the data stream type `@custom` component template. +The `@custom` component template specific to a data stream has higher precedence over the data stream type `@custom` component template. You can edit a `@custom` component template to customize your {{es}} indices: diff --git a/reference/fleet/detect_mime_type-processor.md b/reference/fleet/detect_mime_type-processor.md index 282f2e865c..4635ef0890 100644 --- a/reference/fleet/detect_mime_type-processor.md +++ b/reference/fleet/detect_mime_type-processor.md @@ -36,7 +36,7 @@ In this example, `http.request.body.content` is used as the source, and `http.re | Name | Required | Default | Description | | --- | --- | --- | --- | | `field` | Yes | | Field used as the data source. | -| `target` | Yes | | Field to populate with the detected type. You can use the `@metadata.` prefixto set the value in the event metadata instead of fields. | +| `target` | Yes | | Field to populate with the detected type. You can use the `@metadata.` prefix to set the value in the event metadata instead of fields. | See [Conditions](/reference/fleet/dynamic-input-configuration.md#conditions) for a list of supported conditions. diff --git a/reference/fleet/hints-annotations-autodiscovery.md b/reference/fleet/hints-annotations-autodiscovery.md index cca3077eac..abd67710a7 100644 --- a/reference/fleet/hints-annotations-autodiscovery.md +++ b/reference/fleet/hints-annotations-autodiscovery.md @@ -144,7 +144,7 @@ co.elastic.hints/processors.dissect.tokenizer: "%{key2} %{key1}" In the above sample the processor definition tagged with `1` would be executed first. ::::{important} -Processor configuration is not supported on the datastream level, so annotations like `co.elastic.hints/.processors` are ignored. +Processor configuration is not supported on the data stream level, so annotations like `co.elastic.hints/.processors` are ignored. :::: diff --git a/reference/fleet/ingest-pipeline-kubernetes.md b/reference/fleet/ingest-pipeline-kubernetes.md index 82cf7b1b6f..bb48f687f5 100644 --- a/reference/fleet/ingest-pipeline-kubernetes.md +++ b/reference/fleet/ingest-pipeline-kubernetes.md @@ -37,7 +37,7 @@ Enabling deployment and cronjob metadata enrichment leads to an increase of Elas As an alternative to keeping the feature enabled and using more memory resources for {{agent}}, users can make use of ingest pipelines to add the missing fields of `kubernetes.deployment.name` and `kubernetes.cronjob.name`. -Navigate to `state_pod` datastream under: **Kubernetes Integration Policy > Collect Kubernetes metrics from Kube-state-metrics > Kubernetes Pod Metrics**. +Navigate to `state_pod` data stream under: **Kubernetes Integration Policy > Collect Kubernetes metrics from Kube-state-metrics > Kubernetes Pod Metrics**. Create the following custom ingest pipeline with two processors: diff --git a/reference/fleet/integrations-assets-best-practices.md b/reference/fleet/integrations-assets-best-practices.md index f5be3ae747..7b34e4f032 100644 --- a/reference/fleet/integrations-assets-best-practices.md +++ b/reference/fleet/integrations-assets-best-practices.md @@ -67,7 +67,7 @@ While creating a `@custom` component template for a package integration is suppo For example: -* If the `@package` component template of an integration is changed from a "normal" datastream to `TSDB` or `LogsDB`, some of the custom settings or mappings introduced may not be compatible with these indexing modes. +* If the `@package` component template of an integration is changed from a "normal" data stream to `TSDB` or `LogsDB`, some of the custom settings or mappings introduced may not be compatible with these indexing modes. * If the type of an ECS field is overridden from, for example, `keyword` to `text`, aggregations based on that field may be prevented for built-in dashboards. A similar caution against custom index mappings is noted in [Edit the {{es}} index template](/reference/fleet/data-streams.md#data-streams-index-templates-edit). @@ -86,6 +86,6 @@ When you clone the index template of an integration package, this involves risk Additionally, cloning index templates to add or inject additional component templates cannot be tested by Elastic, so we cannot guarantee that the template will work in future releases. -If you want to change the ILM Policy, the number of shards, or other settings for the datastreams of one or more integrations, but the changes do not need to be specific to a given namespace, it’s highly recommended to use the `package@custom` component templates, as described in [Scenario 1](/reference/fleet/data-streams-scenario1.md) and [Scenario 2](/reference/fleet/data-streams-scenario2.md) of the Customize data retention policies tutorial, so as to avoid the problems mentioned above. +If you want to change the ILM Policy, the number of shards, or other settings for the data streams of one or more integrations, but the changes do not need to be specific to a given namespace, it’s highly recommended to use the `package@custom` component templates, as described in [Scenario 1](/reference/fleet/data-streams-scenario1.md) and [Scenario 2](/reference/fleet/data-streams-scenario2.md) of the Customize data retention policies tutorial, so as to avoid the problems mentioned above. If you want to change these settings for the data streams in one or more integrations and the changes **need to be namespace specific**, then you can do so following the steps in [Scenario 3](/reference/fleet/data-streams-scenario3.md) of the Customize data retention policies tutorial, but be aware of the restrictions mentioned above. diff --git a/reference/fleet/migrate-auditbeat-to-agent.md b/reference/fleet/migrate-auditbeat-to-agent.md index 2c91b88cba..420c06357d 100644 --- a/reference/fleet/migrate-auditbeat-to-agent.md +++ b/reference/fleet/migrate-auditbeat-to-agent.md @@ -40,7 +40,7 @@ The following table describes the integrations you can use instead of {{auditbea | [System.process](beats://reference/auditbeat/auditbeat-dataset-system-process.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because out of the box it reports events for every process in [ECS](integration-docs://reference/index.md) format and has excellent integration in [Kibana](/get-started/the-stack.md). | | [Custom Windows event log](integration-docs://reference/winlog/index.md) and [Sysmon](integration-docs://reference/sysmon_linux/index.md) integrations | Provide process data. | | [Osquery](integration-docs://reference/osquery/index.md) or[Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Collect data from the [process](https://www.osquery.io/schema/5.1.0/#process) table on some operating systems without polling. | -| [System.socket](beats://reference/auditbeat/auditbeat-dataset-system-socket.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because it supports monitoring network connections on Linux,Windows, and MacOS. Includes process and user metadata. Currently does not do flow accounting (byte and packet counts) or domain name enrichment (but doescollect DNS queries separately). | +| [System.socket](beats://reference/auditbeat/auditbeat-dataset-system-socket.md) dataset | [Endpoint](/solutions/security/configure-elastic-defend/install-elastic-defend.md) | Best replacement because it supports monitoring network connections on Linux,Windows, and MacOS. Includes process and user metadata. Currently does not do flow accounting (byte and packet counts) or domain name enrichment (but does collect DNS queries separately). | | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor socket events via the [socket_events](https://www.osquery.io/schema/5.1.0/#socket_events) table for Linux and MacOS. | | [System.user](beats://reference/auditbeat/auditbeat-dataset-system-user.md) dataset | [Osquery](integration-docs://reference/osquery/index.md) or [Osquery Manager](integration-docs://reference/osquery_manager/index.md) integration | Monitor local users via the [user](https://www.osquery.io/schema/5.1.0/#user) table for Linux, Windows, and MacOS. | diff --git a/reference/fleet/processor-parse-aws-vpc-flow-log.md b/reference/fleet/processor-parse-aws-vpc-flow-log.md index 1c00d8cefa..24cfc47095 100644 --- a/reference/fleet/processor-parse-aws-vpc-flow-log.md +++ b/reference/fleet/processor-parse-aws-vpc-flow-log.md @@ -127,7 +127,7 @@ This mode maps the original VPC flow log fields into their associated Elastic Co ### ECS and Original [_ecs_and_original] -This mode maps the fields into ECS and retains all the original fields. Below is an example document produced using `ecs_and_orignal` mode. +This mode maps the fields into ECS and retains all the original fields. Below is an example document produced using `ecs_and_original` mode. ```json { diff --git a/reference/fleet/script-processor.md b/reference/fleet/script-processor.md index 6b64f41d8e..6a875c712b 100644 --- a/reference/fleet/script-processor.md +++ b/reference/fleet/script-processor.md @@ -101,11 +101,11 @@ The `Event` object passed to the `process` method has the following API. | Method | Description | | --- | --- | -| `Get(string)` | Get a value from the event (either a scalar or an object). If the key does notexist `null` is returned. If no key is provided then an object containing allfields is returned.
**Example**: `var value = event.Get(key);` | -| `Put(string, value)` | Put a value into the event. If the key was already set then theprevious value is returned. It throws an exception if the key cannot be setbecause one of the intermediate values is not an object.
**Example**: `var old = event.Put(key, value);` | -| `Rename(string, string)` | Rename a key in the event. The target key must not exist. Itreturns true if the source key was successfully renamed to the target key.
**Example**: `var success = event.Rename("source", "target");` | +| `Get(string)` | Get a value from the event (either a scalar or an object). If the key does not exist `null` is returned. If no key is provided then an object containing all fields is returned.
**Example**: `var value = event.Get(key);` | +| `Put(string, value)` | Put a value into the event. If the key was already set then the previous value is returned. It throws an exception if the key cannot be set because one of the intermediate values is not an object.
**Example**: `var old = event.Put(key, value);` | +| `Rename(string, string)` | Rename a key in the event. The target key must not exist. It returns true if the source key was successfully renamed to the target key.
**Example**: `var success = event.Rename("source", "target");` | | `Delete(string)` | Delete a field from the event. It returns true on success.
**Example**: `var deleted = event.Delete("user.email");` | -| `Cancel()` | Flag the event as cancelled which causes the processor to dropevent.
**Example**: `event.Cancel(); return;` | -| `Tag(string)` | Append a tag to the `tags` field if the tag does not alreadyexist. Throws an exception if `tags` exists and is not a string or a list ofstrings.
**Example**: `event.Tag("user_event");` | -| `AppendTo(string, string)` | `AppendTo` is a specialized `Put` method that converts the existing value to anarray and appends the value if it does not already exist. If there is anexisting value that’s not a string or array of strings then an exception isthrown.
**Example**: `event.AppendTo("error.message", "invalid file hash");` | +| `Cancel()` | Flag the event as cancelled which causes the processor to drop event.
**Example**: `event.Cancel(); return;` | +| `Tag(string)` | Append a tag to the `tags` field if the tag does not already exist. Throws an exception if `tags` exists and is not a string or a list of strings.
**Example**: `event.Tag("user_event");` | +| `AppendTo(string, string)` | `AppendTo` is a specialized `Put` method that converts the existing value to an array and appends the value if it does not already exist. If there is an existing value that’s not a string or array of strings then an exception is thrown.
**Example**: `event.AppendTo("error.message", "invalid file hash");` | diff --git a/reference/fleet/timestamp-processor.md b/reference/fleet/timestamp-processor.md index 93eedcaf2a..c4659f302f 100644 --- a/reference/fleet/timestamp-processor.md +++ b/reference/fleet/timestamp-processor.md @@ -73,7 +73,7 @@ Here is an example that parses the `start_time` field and writes the result to t | `layouts` | Yes | | Timestamp layouts that define the expected time value format. In addition layouts, `UNIX` and `UNIX_MS` are accepted. | | `timezone` | No | `UTC` | IANA time zone name (for example, `America/New_York`) or fixed time offset (for example, `+0200`) to use when parsing times that do not contain a time zone. Specify `Local` to use the machine’s local time zone. | | `ignore_missing` | No | `false` | Whether to ignore errors when the source field is missing. | -| `ignore_failure` | No | `false` | Whether to gnore all errors produced by the processor. | +| `ignore_failure` | No | `false` | Whether to ignore all errors produced by the processor. | | `test` | No | | List of timestamps that must parse successfully when loading the processor. | | `id` | No | | Identifier for this processor instance. Useful for debugging. | diff --git a/reference/fleet/upgrade-standalone.md b/reference/fleet/upgrade-standalone.md index 3e5c127ac2..d092ebdd16 100644 --- a/reference/fleet/upgrade-standalone.md +++ b/reference/fleet/upgrade-standalone.md @@ -25,7 +25,7 @@ This command upgrades the binary. Your agent policy should continue to work, but For more command-line options, see the help for the [`upgrade`](/reference/fleet/agent-command-reference.md#elastic-agent-upgrade-command) command. -## Upgrading standalone {{agent}} in an air-gapped environmment [upgrade-standalone-air-gapped] +## Upgrading standalone {{agent}} in an air-gapped environment [upgrade-standalone-air-gapped] The basic upgrade scenario should work for most use cases. However, in an air-gapped environment {{agent}} is not able to access the {{artifact-registry}} at `artifacts.elastic.co` directly. @@ -41,7 +41,7 @@ Refer to [Air-gapped environments](/reference/fleet/air-gapped.md) for more deta ## Verifying {{agent}} package signatures [upgrade-standalone-verify-package] -Standalone {{agent}} verifies each package that it downloads using publically available SHA hash and .asc PGP signature files. The SHA file is used to verify that the package has not been modified, and the .asc file is used to verify that the package was released by Elastic. For this purpose, the Elastic public GPG key is embedded in {{agent}} itself. +Standalone {{agent}} verifies each package that it downloads using publicly available SHA hash and .asc PGP signature files. The SHA file is used to verify that the package has not been modified, and the .asc file is used to verify that the package was released by Elastic. For this purpose, the Elastic public GPG key is embedded in {{agent}} itself. At times, the Elastic private GPG key may need to be rotated, either due to the key expiry or due to the private key having been exposed. In this case, standalone {{agent}} upgrades can fail because the embedded public key no longer works. From b2593ff1e9cc07f83e407c83e089c4cf815bf3cf Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Wed, 1 Oct 2025 11:39:17 +0200 Subject: [PATCH 11/11] Add applies_to to 'Secure connections' docs --- reference/fleet/certificates-rotation.md | 4 +++- reference/fleet/mutual-tls.md | 5 +++++ reference/fleet/secure-connections.md | 3 +++ reference/fleet/secure-logstash-connections.md | 2 ++ reference/fleet/secure.md | 2 ++ reference/fleet/tls-overview.md | 2 ++ 6 files changed, 17 insertions(+), 1 deletion(-) diff --git a/reference/fleet/certificates-rotation.md b/reference/fleet/certificates-rotation.md index 72d56968f5..6c4b7fa1b8 100644 --- a/reference/fleet/certificates-rotation.md +++ b/reference/fleet/certificates-rotation.md @@ -1,6 +1,8 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/certificates-rotation.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent @@ -8,7 +10,7 @@ products: # Rotate SSL/TLS CA certificates [certificates-rotation] -In some scenarioes you may want to rotate your configured certificate authorities (CAs), for instance if your chosen CAs are due to expire. Refer to the following steps to rotate certificates between connected components: +In some scenarios you may want to rotate your configured certificate authorities (CAs), for instance if your chosen CAs are due to expire. Refer to the following steps to rotate certificates between connected components: * [Rotating a {{fleet-server}} CA](#certificates-rotation-agent-fs) * [Rotating an {{es}} CA for connections from {{fleet-server}}](#certificates-rotation-fs-es) diff --git a/reference/fleet/mutual-tls.md b/reference/fleet/mutual-tls.md index d0efa834c7..664d4a4014 100644 --- a/reference/fleet/mutual-tls.md +++ b/reference/fleet/mutual-tls.md @@ -1,6 +1,11 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/mutual-tls.html +applies_to: + deployment: + ece: ga + ess: ga + self: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/secure-connections.md b/reference/fleet/secure-connections.md index 305879f0f8..fc47ce331c 100644 --- a/reference/fleet/secure-connections.md +++ b/reference/fleet/secure-connections.md @@ -1,6 +1,9 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/secure-connections.html +applies_to: + deployment: + self: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/secure-logstash-connections.md b/reference/fleet/secure-logstash-connections.md index 6facd386a9..068f333377 100644 --- a/reference/fleet/secure-logstash-connections.md +++ b/reference/fleet/secure-logstash-connections.md @@ -1,6 +1,8 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/secure-logstash-connections.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/secure.md b/reference/fleet/secure.md index 18d3a2d03e..9cb97a7c25 100644 --- a/reference/fleet/secure.md +++ b/reference/fleet/secure.md @@ -2,6 +2,8 @@ navigation_title: Secure connections mapped_pages: - https://www.elastic.co/guide/en/fleet/current/secure.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent diff --git a/reference/fleet/tls-overview.md b/reference/fleet/tls-overview.md index 051e07077a..1723770ce0 100644 --- a/reference/fleet/tls-overview.md +++ b/reference/fleet/tls-overview.md @@ -1,6 +1,8 @@ --- mapped_pages: - https://www.elastic.co/guide/en/fleet/current/tls-overview.html +applies_to: + stack: ga products: - id: fleet - id: elastic-agent