Skip to content

[Fleet] Document 'Write to logs streams' setting in ES and remote ES output docs #4253

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vishaangelova merged 5 commits into from
Dec 12, 2025
Merged

[Fleet] Document 'Write to logs streams' setting in ES and remote ES output docs #4253

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ab453ba
Document 'Write to logs streams' setting in ES and remote ES output
vishaangelova Dec 9, 2025
6e91549
Update reference/fleet/es-output-settings.md
vishaangelova Dec 9, 2025
ea60b46
Update reference/fleet/remote-elasticsearch-output.md
vishaangelova Dec 12, 2025
3985925
Merge branch 'main' into 3855-es-output-write-to-logstreams-setting
vishaangelova Dec 12, 2025
b0240af
Merge branch 'main' into 3855-es-output-write-to-logstreams-setting
vishaangelova Dec 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions reference/fleet/es-output-settings.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,6 +71,9 @@ Specify these settings to send data over a secure connection to {{es}}. In the {
5. Adjust any settings as preferred. For example, you can update the `compression_level` setting to `4`.
When you create an {{agent}} policy using this output, the output will use the balanced preset options except with the higher compression level, as specified.

**Write to logs streams** {applies_to}`serverless: preview` {applies_to}`stack: preview 9.2`
: When this setting is on, `logs` and `logs.*` are added to the output streams configuration in the agent policy using this output. Enabling this setting is only part of the process for allowing {{agent}} to send data to [wired streams](/solutions/observability/streams/streams.md#streams-wired-streams). For additional required steps, refer to [Ship data to streams > {{fleet}}](/solutions/observability/streams/wired-streams.md#streams-wired-streams-ship).

## Advanced YAML configuration [es-output-settings-yaml-config]

`allow_older_versions` $$$output-elasticsearch-fleet-settings-allow_older_versions-setting$$$
Expand Down
5 changes: 5 additions & 0 deletions reference/fleet/remote-elasticsearch-output.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,11 @@ Choose whether the remote output should be the default for agent integrations or
Select the [performance tuning settings](/reference/fleet/es-output-settings.md#es-output-settings-performance-tuning-settings) to optimize {{agent}}s for throughput, scale, or latency, or leave the default `balanced` setting.
::::

::::{step}
{applies_to}`serverless: preview` {applies_to}`stack: preview 9.2`
Choose whether {{agents}} using this output should send data to [wired streams](/solutions/observability/streams/streams.md#streams-wired-streams). Using this feature requires additional steps. For more details, refer to [Ship data to streams > {{fleet}}](/solutions/observability/streams/wired-streams.md#streams-wired-streams-ship).
::::

::::{step}
Add any [advanced YAML configuration settings](/reference/fleet/es-output-settings.md#es-output-settings-yaml-config) that you’d like for the remote output.
::::
Expand Down
Loading