Beats vs Elastic Agent - use case of SIEM

Elastic Stack Beats
1

Hello dear Community!

I wanted to ask a beginner question - what is the difference between Beats and Elastic Agent and what is better for SIEM analysis?

Cheers

2

Welcome to our community! :smiley:

The Agent is designed to simplify deployment of all of our Beats. So it shouldn't matter too much if you use the Beats directly or via the Agent, as the source modules will be the same.

Using the Agent might be better though, as it's the future.

3

Thank you, a simple and clear answer :slight_smile:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.