Skip to main content

Ingext Community Edition Now Runs on Kubernetes, in Any Cloud

Support
Support
Fluency Support

Ingext Community Edition, free on AWS Marketplace since 2024, now also installs into your own Kubernetes cluster on AWS, Microsoft Azure or Google Cloud, from Helm charts. It collects, labels, enriches, transforms and routes telemetry before it reaches a SIEM, and stores it in a searchable data lake in your own cloud account.

What's new​

  • Kubernetes, in three clouds. Community Edition is delivered as Helm charts and runs in Kubernetes on AWS, Azure or Google Cloud, so it deploys into the infrastructure you already run.
  • A data lake you own. Data lands in Parquet storage in your own cloud account, alongside routing to your SIEM.
  • Configured from the command line. The ingext CLI does most setup — sources, sinks, routers and data-lake indexes — in one command each.

The AWS Marketplace edition remains available; see Ingext Community Edition on AWS Marketplace.

What it does​

  • Collect and transform in motion. Events are labeled, enriched and normalized as they arrive, not after they land.
  • Route by value. High-volume telemetry goes to low-cost Parquet storage in your data lake; the events that matter go on to your SIEM, through Splunk HEC or the Elasticsearch bulk API.
  • Search everything in one place. Recent and archived data are searched from the same interface, with no rehydration or re-indexing.
  • Keep your data. The platform, the data lake and the data stay in your cloud account.

Sources and sinks​

Out of the box, Community Edition reads AWS CloudTrail, AWS CloudWatch log groups, Amazon EKS logs, Azure Event Hubs, Office 365 and Google Workspace audit events, and HEC input, with sources and sinks on Amazon Kinesis, Amazon S3, Azure Blob Storage and Google Cloud Storage.

Small to start​

  • The whole stack runs on a single small node.
  • Installation and configuration are done from the Ingext cloud shell, a Docker container with the ingext CLI and the AWS, Azure and Google Cloud tools already installed.

Getting started​

  1. Clone the ingext-helm-charts repository.
  2. From the repository's root folder, start the cloud shell with ./ingext-shell.sh.
  3. In the shell, change to the lakehouse folder for your cloud, then run the preflight check and the installer.
  4. Follow the repository's configuration guide to connect your first sources.

The latest changes are in the Ingext Community Edition v1.1.0 release notes.

Splash Summary

Ingext Community Edition, free on AWS Marketplace since 2024, now also installs into your own Kubernetes cluster on AWS, Microsoft Azure or Google Cloud, from Helm charts. It collects, labels, enriches, transforms and routes telemetry before it reaches a SIEM, and stores it in a searchable data lake in your own cloud account.