Beats are open source data shippers. They are single-purpose tools. Some beats are created and maintained by the company Elastic. Those listed in this beats overview. The community creates an additional wide range of beats. Most of the beats should work out of the box with the Graylog beats input. But it might be needed to adjust the settings.

For most beats, the logstash output is to send the messages to Graylog. For a beat, it makes no difference what receives the signals as long as it follows the protocol. The relatively new options to make use of a queue system are not (yet) implemented in Graylog so that the TCP input is the only option.

This input can make use of TLS and certificates for authentification.

See also:

• AWS Kinesis/CloudWatch Input
• Palo Alto Networks Input
• IPFIX Input
• GreyNoise Data Adapter