Event destination type · v1.0.0
Elasticsearch / OpenSearch (event destination type)
Indexes events through the _bulk API, each as a document with @timestamp and Keystone's own event under keystone. The event id is the document id, so a batch sent twice is not indexed twice.
Use cases
- Keystone forwards an organization's events in its own shape; mapping them to a schema, searching and correlating them is the destination's work.
- Set it up under Events → Destinations → New destination, for the organization whose events should go.
Elasticsearch / OpenSearchevent destination typeevent export