> For the complete documentation index, see [llms.txt](https://docs.couchdrop.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.couchdrop.io/integrations/siem/elastic.md).

# Elastic

Learn how to send events to Logstash to use with Elastic from Couchdrop

## Overview

Couchdrop can send selected events to Logstash for centralized logging and downstream processing.

Configuration is completed in two parts:

1. **Configure Logstash** — Set up the Logstash HTTP input plugin so it can receive events from Couchdrop, then collect the connection details Couchdrop will use.
2. **Configure Couchdrop** — Enter those Logstash connection details in Couchdrop, choose which events to send, and save the configuration.

## Configure Logstash settings in Elastic

{% hint style="warning" %}

#### Before you start

To configure Logstash for Couchdrop, you will need:

* A Logstash instance.
* The Logstash HTTP input plugin configured to receive events.
  {% endhint %}

{% stepper %}
{% step %}

### Configure the HTTP input

Configure the Logstash HTTP input plugin so Logstash can receive events from Couchdrop.

For more information, see the [Logstash HTTP input plugin documentation](https://www.elastic.co/docs/reference/logstash/plugins/plugins-inputs-http).
{% endstep %}

{% step %}

### Collect your Logstash connection details

Before configuring Couchdrop, make sure you have:

* **Elastic Username**
* **Elastic Password**
* **Elastic URL**
  {% endstep %}
  {% endstepper %}

## Set up Logstash logging in Couchdrop

{% hint style="warning" %}

#### Before you start

To configure Logstash logging in Couchdrop, you will need:

* A Couchdrop account with access to the SIEM logging settings.
* Your Elastic username, password, and URL.
  {% endhint %}

{% stepper %}
{% step %}

### Open Logstash logging settings

Log in to Couchdrop and navigate to **Admin Panel → Logging**.

Select **Connect** or **Manage** on the Elastic provider.
{% endstep %}

{% step %}

### Select events to send

Select the Couchdrop events you want to send to Logstash.
{% endstep %}

{% step %}

### Enter your Logstash configuration

Configure the required Logstash fields:

* **Elastic Username**
* **Elastic Password**
* **Elastic URL**
  {% endstep %}

{% step %}

### Save the configuration

Click **Save Updates**.
{% endstep %}
{% endstepper %}