How do Beats receive configuration changes from Beats Central Management (i.e REST, SSH)?

I am trying to find how the Beats Central Management console in Kibana deploys configuration changes to enrolled Beats.

I have searched the documentation of both Beats and Beats Central Management, but have seen no clear detail specifying how these changes are deployed. I know that when a Beat is enrolled it receives an "access token" for configuration polling, but does this mean that REST is used?

Yep, it uses HTTP(s) calls to Elasticsearch.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.