{"id":13451692,"url":"https://github.com/elastic/beats","last_synced_at":"2026-04-08T16:04:31.312Z","repository":{"id":260686519,"uuid":"16554739","full_name":"elastic/beats","owner":"elastic","description":":tropical_fish: Beats - Lightweight shippers for Elasticsearch \u0026 Logstash","archived":false,"fork":false,"pushed_at":"2025-12-07T08:50:17.000Z","size":488595,"stargazers_count":12560,"open_issues_count":1058,"forks_count":4985,"subscribers_count":668,"default_branch":"main","last_synced_at":"2025-12-07T15:40:48.971Z","etag":null,"topics":["filebeat","heartbeat","metricbeat","packetbeat","winlogbeat"],"latest_commit_sha":null,"homepage":"https://www.elastic.co/products/beats","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/elastic.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG-developer.asciidoc","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":"auditbeat/.gitignore","citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE.txt","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-02-05T19:01:02.000Z","updated_at":"2025-12-06T08:55:33.000Z","dependencies_parsed_at":"2024-11-01T21:19:28.712Z","dependency_job_id":"dc5ccce7-8f98-4f02-aa18-81754436bfee","html_url":"https://github.com/elastic/beats","commit_stats":{"total_commits":15747,"total_committers":828,"mean_commits":"19.018115942028984","dds":0.9135073347304248,"last_synced_commit":"525ed30da32ed7a1132232afbdc6114f21504bb4"},"previous_names":["elastic/beats","elastic/packetbeat","packetbeat/packetbeat"],"tags_count":347,"template":false,"template_full_name":null,"purl":"pkg:github/elastic/beats","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fbeats","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fbeats/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fbeats/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fbeats/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/elastic","download_url":"https://codeload.github.com/elastic/beats/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fbeats/sbom","scorecard":{"id":6883,"data":{"date":"2025-08-11","repo":{"name":"github.com/elastic/beats","commit":"d8606faa49423044c9f1952b57fd486ea99c7275"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/elastic/.github/SECURITY.md:1","Info: Found linked content: github.com/elastic/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/elastic/.github/SECURITY.md:1","Info: Found text in security policy: github.com/elastic/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/bump-elastic-stack-snapshot.yml:25","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/bump-golang.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/catalog-info.yml:18","Info: jobLevel 'packages' permission set to 'read': .github/workflows/catalog-info.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docs-build.yml:19","Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/docs-build.yml:17","Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/docs-cleanup.yml:14","Info: found token with 'none' permissions: .github/workflows/docs-cleanup.yml:12","Info: jobLevel 'repository-projects' permission set to 'read': .github/workflows/mergify-labels-copier.yml:19","Info: jobLevel 'repository-projects' permission set to 'read': .github/workflows/post-dependabot.yml:48","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:19","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/updatecli-compose.yml:16","Info: jobLevel 'packages' permission set to 'read': .github/workflows/updatecli-compose.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/auditbeat-macos-unit-tests.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/backport-active.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/bump-elastic-stack-snapshot.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/bump-golang.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/catalog-info.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/check-default.yml:12","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/check-default.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/check-dev-tools.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/check-docs.yml:12","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/check-docs.yml:13","Warn: no topLevel permission defined: .github/workflows/docs-build.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-cleanup.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/filebeat-macos-unit-tests.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/github-commands-comment.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:11","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/golangci-lint.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/heartbeat-macos-unit-tests.yml:33","Info: topLevel 'contents' permission set to 'read': .github/workflows/mergify-labels-copier.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/metricbeat-macos-unit-tests.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/notify-stalled-snapshots.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/packetbeat-macos-unit-tests.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/platform-ingest-project-board.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/post-dependabot.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/pre-commit.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/updatecli-compose.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/xpack-auditbeat-macos-unit-tests.yml:38","Info: topLevel 'contents' permission set to 'read': .github/workflows/xpack-filebeat-macos-unit-tests.yml:38","Info: topLevel 'contents' permission set to 'read': .github/workflows/xpack-heartbeat-macos-unit-tests.yml:37","Info: topLevel 'contents' permission set to 'read': .github/workflows/xpack-metricbeat-macos-unit-tests.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/xpack-osquerybeat-macos-unit-tests.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/xpack-packetbeat-macos-unit-tests.yml:36"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: x-pack/filebeat/processors/decode_cef/cef/cef_test.go:92"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: packetbeat/lib/windows-64/wpcap.dll:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"internal error: internal error: invalid Dockerfile: Syntax error - can't find = in \"$beatHome\". Must be of the form: name=value","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"11 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: PYSEC-2014-14 / GHSA-652x-xj99-gmcc","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2014-13 / GHSA-cfj3-7x9c-4p3h","Warn: Project is vulnerable to: PYSEC-2018-28 / GHSA-x84v-xcm2-53pg","Warn: Project is vulnerable to: GO-2025-3699 / GHSA-cm76-qm8v-3j95","Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: PYSEC-2022-42969","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-14T13:45:05.870Z","repository_id":260686519,"created_at":"2025-08-14T13:45:05.870Z","updated_at":"2025-08-14T13:45:05.870Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27781938,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-17T02:00:08.291Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["filebeat","heartbeat","metricbeat","packetbeat","winlogbeat"],"created_at":"2024-07-31T07:00:59.304Z","updated_at":"2025-12-17T10:48:53.724Z","avatar_url":"https://github.com/elastic.png","language":"Go","readme":"[![Go Report Card](https://goreportcard.com/badge/github.com/elastic/beats)](https://goreportcard.com/report/github.com/elastic/beats)\n[![Reviewed by Hound](https://img.shields.io/badge/Reviewed_by-Hound-8E64B0.svg)](https://houndci.com)\n\n# Beats - The Lightweight Shippers of the Elastic Stack\n\nThe [Beats](https://www.elastic.co/beats) are lightweight data\nshippers, written in Go, that you install on your servers to capture all sorts\nof operational data (think of logs, metrics, or network packet data). The Beats\nsend the operational data to Elasticsearch, either directly or via Logstash, so\nit can be visualized with Kibana.\n\nBy \"lightweight\", we mean that Beats have a small installation footprint, use\nlimited system resources, and have no runtime dependencies.\n\nThis repository contains\n[libbeat](https://github.com/elastic/beats/tree/main/libbeat), our Go\nframework for creating Beats, and all the officially supported Beats:\n\nBeat  | Description\n--- | ---\n[Auditbeat](https://github.com/elastic/beats/tree/main/auditbeat) | Collect your Linux audit framework data and monitor the integrity of your files.\n[Filebeat](https://github.com/elastic/beats/tree/main/filebeat) | Tails and ships log files\n[Heartbeat](https://github.com/elastic/beats/tree/main/heartbeat) | Ping remote services for availability\n[Metricbeat](https://github.com/elastic/beats/tree/main/metricbeat) | Fetches sets of metrics from the operating system and services\n[Packetbeat](https://github.com/elastic/beats/tree/main/packetbeat) | Monitors the network and applications by sniffing packets\n[Winlogbeat](https://github.com/elastic/beats/tree/main/winlogbeat) | Fetches and ships Windows Event logs\n[Osquerybeat](https://github.com/elastic/beats/tree/main/x-pack/osquerybeat) | Runs Osquery and manages interraction with it.\n\nIn addition to the above Beats, which are officially supported by\n[Elastic](https://elastic.co), the community has created a set of other Beats\nthat make use of libbeat but live outside of this Github repository. We maintain\na list of community Beats\n[here](https://www.elastic.co/guide/en/beats/libbeat/master/community-beats.html).\n\n## Documentation and Getting Started\n\nYou can find the documentation and getting started guides for each of the Beats\non the [elastic.co site](https://www.elastic.co/guide/):\n\n* [Beats platform](https://www.elastic.co/guide/en/beats/libbeat/current/index.html)\n* [Auditbeat](https://www.elastic.co/guide/en/beats/auditbeat/current/index.html)\n* [Filebeat](https://www.elastic.co/guide/en/beats/filebeat/current/index.html)\n* [Heartbeat](https://www.elastic.co/guide/en/beats/heartbeat/current/index.html)\n* [Metricbeat](https://www.elastic.co/guide/en/beats/metricbeat/current/index.html)\n* [Packetbeat](https://www.elastic.co/guide/en/beats/packetbeat/current/index.html)\n* [Winlogbeat](https://www.elastic.co/guide/en/beats/winlogbeat/current/index.html)\n\n## Documentation and Getting Started information for the Elastic Agent\n\nYou can find the documentation and getting started guides for the Elastic Agent\non the [elastic.co site](https://www.elastic.co/downloads/elastic-agent)\n\n## Getting Help\n\nIf you need help or hit an issue, please start by opening a topic on our\n[discuss forums](https://discuss.elastic.co/c/beats). Please note that we\nreserve GitHub tickets for confirmed bugs and enhancement requests.\n\n## Downloads\n\nYou can download pre-compiled Beats binaries, as well as packages for the\nsupported platforms, from [this page](https://www.elastic.co/downloads/beats).\n\n## Contributing\n\nWe'd love working with you! You can help make the Beats better in many ways:\nreport issues, help us reproduce issues, fix bugs, add functionality, or even\ncreate your own Beat.\n\nPlease start by reading our [CONTRIBUTING](CONTRIBUTING.md) file.\n\n## Building Beats from the Source\n\nSee our [CONTRIBUTING](CONTRIBUTING.md) file for information about setting up\nyour dev environment to build Beats from the source.\n\n## Snapshots\n\nFor testing purposes, we generate snapshot builds that you can find [here](https://artifacts-api.elastic.co/v1/search/8.0-SNAPSHOT/). Please be aware that these are built on top of main and are not meant for production.\n\n## CI\n\n### PR Comments\n\nIt is possible to trigger some jobs by putting a comment on a GitHub PR.\n(This service is only available for users affiliated with Elastic and not for open-source contributors.)\n\n* [beats CI pipeline](https://buildkite.com/elastic/beats)\n  * `/test` will kick off a default build.\n* [docs CI pipeline]([https://buildkite.com/elastic/beats](https://buildkite.com/elastic/docs-build-pr))\n  * `run docs-build` will kick off a docs build.\n\n### PR Labels\n\nIt's possible to configure the build on a GitHub PR by labeling the PR with certain labels. Elastic users can find more details at https://docs.elastic.dev/ingest-dev-docs/beats/beats-ci.\n","funding_links":[],"categories":["Go","Data Management \u0026 Processing","3. Collect","others","数据搜索引擎","Application Recommendation","ElasticSearch-Manage","APM Monitoring","Elastic Stack","Logging"],"sub_categories":["Database \u0026 Cloud Management","Logging","资源传输下载","📊 Data Analysis","Collector"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felastic%2Fbeats","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Felastic%2Fbeats","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felastic%2Fbeats/lists"}