Packetbeat create pcap file and ingest data

Elastic Stack Elasticsearch
1

We have a requirement to create and store pcap files for all of our web server traffic. I wanted to find out if anyone has used packetbeat to create pcap files to be store and also ingest the data to be used in dashboards. Also if you have any concerns or gotchas

Thanks

2

Packetbeat will capture a certain type of packets and send them directly to ES
If you want to capture full traffic in pcap and send them to ES, think about wireshark
Check this post

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.