Info about the free ELK tools

[sonujatav35]

Hi Elasticsearch Community,

I need some advice, I am creating a New ELK stack where i am going to store oracle log in ES and by using the logstash. I would like get the some information if i use the below the additional integration tool then will be under free subscription or require some platinum or enterprise subscription?

1. metricbeat module : System, Linux, Oracle
2. logstash : JDBC ( For Oracle )
3. filebeat : Oracle logs ( Alert, Listener )

As well I tried to create some alert rule form kibana but it was showing require additional setting to enable that setting do i have to use xpack security feature for that?

Thanks
Sonu

[warkolm (Mark Walkom)]

Everything you are looking at is part of the free Basic license.

[sonujatav35]

Thanks warkolm.

[xeraa]

With the small caveat that alerting out of the cluster (so not "write to log" or "write to an index" but email, webhook, Slack, PagerDuty,...) is a paid / Elastic Cloud feature.

[leandrojmp (Leandro Pereira)]

@sonujatav35

As well I tried to create some alert rule form kibana but it was showing require additional setting to enable that setting do i have to use xpack security feature for that?

You can create rules and alerts with the basic license, but as @xeraa mentioned, the actions are limited, you can only send the alert to Kibana Log file or write the alert to an index.

If you need to send those alerts to external targets there is a third-party tool called ElastAlert2 that is pretty good and cover a lot of limitations that Kibana Alert have.

For example, I manage a platinum licensed cluster and I still need to rely on ElastAlert to trigger some alerts because of Kibana Alert limitations.

[sonujatav35]

Thanks @xeraa.

[sonujatav35]

Thanks @leandrojmp for sharing additional information basically for that project I do not want to go for platinum license.