Integrations
1,392 integration packages, ready to connect
A collection package bundles the collector configuration for a technology, with dashboards and log parsing where they apply. An action package lets your workflows call a tool's API. Anything that speaks OTLP, Prometheus, SNMP, Syslog or NetFlow can be collected too.
Browse the catalog
Showing 48 of 1,392 packages
Type
Category
AWS
Cloud platforms
CloudWatch metrics by namespace (EC2, RDS, ELB/ALB, Lambda, Container Insights) and CloudWatch Logs — agentless via your cross-account role or access key.
Metrics · logs
Azure
Cloud platforms
Azure Monitor metrics with per-resource-type scoping across a subscription.
Metrics
GCP
Cloud platforms
Cloud Monitoring, Cloud Logging, Cloud Trace via a Pub/Sub subscription.
Metrics
Kubernetes
Kubernetes
Everything from the cluster in one integration — cluster state metrics, pod and container usage, object inventory, cluster events, and per-connection network…
Metrics
Docker
Infrastructure
Container metrics (CPU/mem/net) and event stream from the Docker daemon.
Metrics
Host Metrics
Infrastructure
CPU, memory, disk, network, processes, filesystems on Linux/macOS/Windows hosts.
Metrics
OTLP (traces · metrics · logs)
APM SDK
Accept OpenTelemetry traces, metrics and logs over gRPC (:4317) and HTTP (:4318) from app SDKs and sidecars.
Traces · metrics · logs
Auto Instrumentation (OBI)
APM SDK
Zero-code eBPF auto-instrumentation for Linux hosts: captures HTTP/gRPC/SQL spans from running processes with no application SDK, then derives RED metrics and…
Traces · metrics
Prometheus
Infrastructure
Scrape any Prometheus /metrics endpoint and ship the series to your deployment.
Metrics
PostgreSQL
Databases
Vacuum stats, bloat, replication lag, query latency, lock contention.
Metrics
MySQL
Databases
Connection pool, replication lag, slow query rate, table growth.
Metrics
SQL Server
Databases
Batch and transaction rates, waits, locks, top queries and live query samples from Microsoft SQL Server.
Metrics
MongoDB
Databases
Replication, sharding, ops/sec, page faults, lock state.
Metrics
Redis
Databases
Memory usage, hit rate, replication, persistence, slowlog.
Metrics
Elasticsearch
Databases
Cluster health, JVM heap, indices, search latency, indexing rate.
Metrics
Apache Kafka
Message queues
Broker, topic, consumer-group lag and partition health from Kafka clusters.
Metrics
RabbitMQ
Message queues
Queue depth, consumer rates, exchange health from the RabbitMQ Management API.
Metrics
NGINX
Web servers
Active connections, request rate, response statuses from /nginx_status.
Metrics
HAProxy
Web servers
Backend health, queue depth, request rate, response codes via the stats socket.
Metrics
Envoy
Service mesh
Standalone Envoy proxy stats — listeners, clusters, upstream RQ totals.
Metrics
Istio
Service mesh
Workload, gateway and control-plane metrics from istiod plus envoy sidecars.
Metrics
SNMP
Network & discovery
Poll SNMP devices for interface counters, CPU and memory, and receive the traps and informs they send. Sweep CIDR ranges or target single devices; vendor…
Metrics · logs
NetFlow / sFlow / IPFIX
Network & discovery
Receive NetFlow v5/v9, IPFIX and sFlow on a UDP port from edge routers, switches and firewalls.
Metrics
Syslog
Logs & events
Receive RFC 3164 / RFC 5424 syslog over UDP or TCP from network devices, firewalls and hosts.
Logs
SD-WAN Fabric
Network & discovery
Multi-vendor SD-WAN controller telemetry — link/path SLA, application QoE, device health from Meraki, Cato, vManage, VeloCloud, EdgeConnect, Mist, Prisma.
Metrics · logs
VMware vCenter
Infrastructure
Host, VM, cluster, datastore and resource-pool metrics from a VMware vCenter / vSphere environment over the vSphere API.
Metrics
GitHub
Logs & events
PR, push, deploy, release events via webhook; CI run timing / failure rate from the Actions API.
Metrics · logs
Okta
Security
Okta System Log events (authentication, authorization, and admin activity) polled from the System Log API.
Logs
Palo Alto Networks PAN-OS
Security
Traffic, threat, and system logs from Palo Alto Networks firewalls over syslog, parsed into searchable fields.
Logs
Cisco ASA
Security
Firewall connection, ACL, and VPN session logs from Cisco ASA over syslog, parsed into searchable fields.
Logs
Fortinet FortiGate
Security
Firewall traffic, UTM, and event logs from FortiGate over syslog, parsed into searchable fields.
Logs
CrowdStrike Falcon
Security
Falcon alerts (endpoint, identity and cloud detections) polled from the CrowdStrike Alerts API with an API client (OAuth2 client credentials), plus…
Logs
RUM Gateway (browser)
APM SDK
Internet-facing OpenTelemetry RUM ingest: validates the public app key, enforces per-key rate limits and origin allowlists, enriches (device/browser; geo…
Metrics · logs
Universal Profiling (eBPF · whole system)
Profiling
Continuously profile every process on a Linux host with the embedded OpenTelemetry eBPF profiler — kernel, native, Go, JVM, Python, Node and more, no code…
Profiles
OpenAI
AI & LLM
OpenAI usage and spend from the Admin Usage & Cost API — per-model input/output/cached/audio token counts, request volume, and USD cost, as metrics and…
Metrics · logs
Anthropic
AI & LLM
Claude usage and spend from the Anthropic Admin Usage & Cost API — per-model token counts, cache hit rate, web-search calls, and daily USD cost, as metrics…
Metrics · logs
1Password Events
Security
1Password Business sign-in attempts, item usage, and audit events from the Events Reporting API.
Logs
abuse.ch Feodo Tracker
Security
Botnet command-and-control IP indicators from abuse.ch Feodo Tracker, matched against your network flows. Needs your own abuse.ch Auth-Key; commercial use of…
Logs
ActiveMQ
Message queues
Broker connections, consumers, message backlog, enqueue and dequeue rates, and store, memory, and JVM heap usage over the Jolokia JMX-HTTP bridge.
Metrics
AlienVault OTX
Security
Threat indicators (IPs, domains, URLs, and file hashes) from your subscribed AlienVault OTX pulses, matched against your telemetry.
Logs
Amazon GuardDuty
Security
GuardDuty findings exported to S3, classified as OCSF Detection Findings with severity mapped from the finding score.
Logs
Anomali ThreatStream
Security
Threat indicators (IPs, domains, URLs, and file hashes) from the Anomali ThreatStream Intelligence API, matched against your telemetry.
Logs
Apache Airflow
Workflow engines
DAG run latency, task success rate, scheduler heartbeat, executor queue depth.
Metrics
Apache HTTPD
Web servers
Worker pool, request rate, byte rate from the Apache mod_status endpoint.
Metrics
Apache Spark
Infrastructure
Standalone cluster health from the Spark master metrics servlet, including workers, alive workers, and running and waiting applications.
Metrics
Apache Tomcat
Web servers
Request and error rates, traffic, processing time, connector thread pool saturation, and JVM heap via Jolokia.
Metrics
APM Gateway (services)
APM SDK
OTLP ingest gateway for app telemetry: validates per-service ingest keys, enforces rate limits, derives RED metrics and the service graph from spans…
Traces · metrics
Arista NG Firewall
Security
Session, firewall, web filter, and intrusion prevention events from Arista NG Firewall (formerly Untangle) over syslog, parsed from their JSON payloads into…
Logs
Not in the catalog? Build a custom integration.
Package a log source as a custom integration with its own dataset, and add it to any policy like a catalog package. The parsing pipeline you publish for that dataset applies wherever it runs. For other sources, start from a generic package.
# Generic packages · any source
- PrometheusScrape any /metrics endpoint.
- OTLPTraces, metrics and logs from any OpenTelemetry SDK.
- Custom SQL QueryTurn SQL query results into metrics.
- HTTP checkStatus code and response time of any URL.
- File logsTail any log file, with JSON and multiline parsing.
- SyslogRFC 3164 and RFC 5424 over UDP or TCP.