Elastic Agent

While the Beats lightweight data shipping ecosystem is great for small projects, they are quickly working their way into oblivion with the new Elastic Agent and Fleet Server combination. Because we are working with a single device, we will install the Elastic Agent as a standalone package and will not be working with the Fleet server. However, if you are looking to marry the Elastic Agent with the ELK stack in a production environment or wish to use multiple Elastic agents on several devices, we recommend examining a newer product Elastic has put out called the Fleet server. The Fleet server is not part of the native Kali Purple distribution as of this writing but it wouldn’t be surprising if a quick install package is added for package managers in the not-too-distant future. You can still set it up through the Kibana dashboard. We’ve added links to the Further reading section if you’d like to go the extra mile.

Let’s grab the product itself...