# Packetbeat with Ai, helpme please

**URL:** <https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [March 24, 2025, 11:28am UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318 "2025-03-24T11:28:29Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nzeland149](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nzeland149/32/143060_2.png) [@nzeland149](https://discuss.elastic.co/u/nzeland149)\
**Post date:** [March 24, 2025, 11:28am UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318/1 "2025-03-24T11:28:29Z")

</div>

i have a question i want to set output file of packetbeat in a file and i want this file get analysed by ai and detect anomalies and then send it to wazuh(works wih filebeat) to view it in kibana  
can anyone help me or told me whre should i start

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [March 24, 2025, 3:58pm UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318/2 "2025-03-24T15:58:19Z")

</div>

Hello,

You can configure packetbeat to output to a file like the example in the [documentation](https://www.elastic.co/guide/en/beats/packetbeat/current/file-output.html).

All other steps you mentioned are not related to any Elastic tool and is out of the scope of this forum.

---

<div class="post-metadata">

**Author:** ![Alex\_Salgado-Elastic](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_salgado-elastic/32/103081_2.png) [@Alex\_Salgado-Elastic](https://discuss.elastic.co/u/Alex_Salgado-Elastic)\
**Post date:** [March 24, 2025, 4:04pm UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318/3 "2025-03-24T16:04:23Z")

</div>

Hi @nzeland149 , welcome to our community.

Here are some other resources where you can find more information:

- [Anomaly Detection in Kibana](https://www.elastic.co/guide/en/kibana/current/xpack-ml-anomalies.html)
- [Explainer video on YouTube](https://www.youtube.com/watch?v=Ca4_5AMvboU)
- [Discussion on anomaly detection for input logs with Elastic Agents](https://discuss.elastic.co/t/anomaly-detection-for-input-logs-elastic-agents/346073/9)
- [Reducing MTTD with Machine Learning and Observability](https://www.elastic.co/observability-labs/blog/reduce-mttd-ml-machine-learning-observability)

---

<div class="post-metadata">

**Author:** ![nzeland149](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nzeland149/32/143060_2.png) [@nzeland149](https://discuss.elastic.co/u/nzeland149)\
**Post date:** [March 25, 2025, 9:49am UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318/4 "2025-03-25T09:49:12Z")

</div>

okay thanks  
i just asked if anyone has already does this for give me ideas

---

<div class="post-metadata">

**Author:** ![nzeland149](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nzeland149/32/143060_2.png) [@nzeland149](https://discuss.elastic.co/u/nzeland149)\
**Post date:** [March 25, 2025, 9:49am UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318/5 "2025-03-25T09:49:47Z")

</div>

thank u so much i will take a look
