# Info about the free ELK tools

**URL:** <https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044>\
**Category:** Kibana\
**Created:** [June 2, 2023, 3:39am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044 "2023-06-02T03:39:44Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![sonujatav35](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sonujatav35/32/90308_2.png) [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\
**Post date:** [June 2, 2023, 3:39am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/1 "2023-06-02T03:39:45Z")

</div>

Hi Elasticsearch Community,

I need some advice, I am creating a New ELK stack where i am going to store oracle log in ES and by using the logstash. I would like get the some information if i use the below the additional integration tool then will be under free subscription or require some platinum or enterprise subscription?

1. metricbeat module : System, Linux, Oracle
2. logstash : JDBC ( For Oracle )
3. filebeat : Oracle logs ( Alert, Listener )

As well I tried to create some alert rule form kibana but it was showing require additional setting to enable that setting do i have to use xpack security feature for that?

Thanks  
Sonu

 ![Screen Shot 2023-06-02 at 12.26.41](https://us1.discourse-cdn.com/elastic/original/3X/9/6/96edb612f5a8d7e89452d2177093afe4481ef4a9.jpeg)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 2, 2023, 7:16am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/2 "2023-06-02T07:16:58Z")

</div>

Everything you are looking at is part of the free Basic license.

---

<div class="post-metadata">

**Author:** ![sonujatav35](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sonujatav35/32/90308_2.png) [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\
**Post date:** [June 2, 2023, 8:09am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/3 "2023-06-02T08:09:32Z")

</div>

Thanks warkolm.

---

<div class="post-metadata">

**Author:** ![xeraa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xeraa/32/48181_2.png) [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Post date:** [June 3, 2023, 5:19pm UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/4 "2023-06-03T17:19:44Z")

</div>

With the small caveat that alerting out of the cluster (so not "write to log" or "write to an index" but email, webhook, Slack, PagerDuty,...) is a paid / Elastic Cloud feature.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 3, 2023, 10:23pm UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/5 "2023-06-03T22:23:45Z")

</div>

> [@sonujatav35](#):
>
> As well I tried to create some alert rule form kibana but it was showing require additional setting to enable that setting do i have to use xpack security feature for that?

You can create rules and alerts with the basic license, but as @xeraa mentioned, the actions are limited, you can only send the alert to Kibana Log file or write the alert to an index.

If you need to send those alerts to external targets there is a third-party tool called [ElastAlert2](https://github.com/jertel/elastalert2) that is pretty good and cover a lot of limitations that Kibana Alert have.

For example, I manage a platinum licensed cluster and I still need to rely on ElastAlert to trigger some alerts because of Kibana Alert limitations.

---

<div class="post-metadata">

**Author:** ![sonujatav35](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sonujatav35/32/90308_2.png) [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\
**Post date:** [June 14, 2023, 8:54am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/6 "2023-06-14T08:54:09Z")

</div>

Thanks @xeraa.

---

<div class="post-metadata">

**Author:** ![sonujatav35](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sonujatav35/32/90308_2.png) [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\
**Post date:** [June 14, 2023, 8:57am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/7 "2023-06-14T08:57:36Z")

</div>

Thanks @leandrojmp for sharing additional information basically for that project I do not want to go for platinum license.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 12, 2023, 8:57am UTC](https://discuss.elastic.co/t/info-about-the-free-elk-tools/335044/8 "2023-07-12T08:57:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
