# SentinelOne Integration with ELK

**URL:** <https://discuss.elastic.co/t/sentinelone-integration-with-elk/384924>\
**Category:** Beats\
**Tags:** elastic-stack-security, filebeat\
**Created:** [February 5, 2026, 6:17am UTC](https://discuss.elastic.co/t/sentinelone-integration-with-elk/384924 "2026-02-05T06:17:55Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [February 5, 2026, 7:39am UTC](https://discuss.elastic.co/t/sentinelone-integration-with-elk/384924/2 "2026-02-05T07:39:10Z")

</div>

Hello @Jayesh_Auti

Welcome to the Community!!

Yes, elastic agent will be required to collect the data. Similar post :

> [@SentinelOne Integration](https://discuss.elastic.co/t/sentinelone-integration/310378/2):
>
> Hi @Medel - welcome to the Discuss community! Within Kibana, if you go to Management -\> Integrations, you should see the SentinelOne integration there. Once you go to that integration and click 'Add SentintelOne' it will take you to the integration configuration, where you can enter your S1 console URL and API key. You'll then need to assign the integration to an Elastic Agent to collect the events and ship to Elastic. For more information on Elastic Agent…

Thanks!!

---

_[View the full topic](https://discuss.elastic.co/t/sentinelone-integration-with-elk/384924)._