Packetbeat is an open source network packet analyzer that ships the data to Elasticsearch. Think of it like a distributed real-time Wireshark with a lot more analytics features.
The Packetbeat shippers sniff the traffic between your application processes, parse on the fly protocols like HTTP, MySQL, PostgreSQL, Redis or Thrift and correlate the messages into transactions.
For each transaction, the shipper inserts a JSON document into Elasticsearch, where it is stored and indexed. You can then use Kibana to view key metrics and do ad-hoc queries against the data.
To learn more about Packetbeat, check out https://www.elastic.co/products/beats/packetbeat.
Please follow the getting started guide from the docs.
Please visit elastic.co for the documentation.
If you have an issue, please start by opening a topic on the forums. We'll help you troubleshoot and work with you on a solution.
If you are sure you found a bug or have a feature request, open an issue on Github.
We love contributions from our community! Please read the CONTRIBUTING.md file.
For testing purposes, we generate snapshot builds that you can find here. Please be aware that these are built on top of master and are not meant for production.