Console
Current versions of Chrome, Edge, Firefox and Safari. Keyboard-first; works at 400 percent zoom.
Senders
Elastic Beats (winlogbeat, filebeat) over TLS; syslog RFC 3164 and 5424 with CEF and LEEF; HTTP JSON; Splunk HEC.
Rule formats
Native query, sequence and correlation rules; Sigma import; KQL and EQL subsets; indicator match.
Connectors
See the data source catalog for inputs and pull connectors, and Response actions for what each connector can do.
Model endpoints
Any endpoint that speaks the OpenAI chat completions API, self-hosted or hosted. See Model setup.