Elasticsearch output & ILM

Configure Elasticsearch as the output, set authentication (API key or basic auth), use Cloud PKI mTLS, and enable Index Lifecycle Management.

6 min read

Elasticsearch is the default output for Timebeat data. Point the agent at one or more hosts and it will index every clock metric, source state and alert into a timebeat-* data stream — with ILM managing rollover and retention.

Sign in to read more

Free access — just your email

Drop your work email and we’ll send a one-time sign-in link. No password to remember, no account to create. Stays valid for 30 days.

By signing in, you agree to receive the requested document and may receive occasional product updates. We never share your details. See our Privacy Policy.

Need a human?

Still working through Timebeat Platform?

The guides cover the configuration surface, but if your deployment has a wrinkle we have not documented, our engineering team is one email away. Most enquiries get a same-day answer.

Talk to a Timebeat engineerDownload the agentAll Timebeat Platform guides