Welcome to Bindplane's How-to Guides!

Step-by-step guides for common Bindplane tasks including cloud integration, authentication, data collection, and third-party integrations

Practical, task-oriented guides for configuring and operating Bindplane.

Partner Integrations

• ClickHouse: Log hygiene, security events, HTTP log pre-processing, and Kubernetes event formatting

• Google SecOps: Quick start, best practices, HTTPS protocol, WIF auth, Chronicle migration, and troubleshooting

• Multi-Node on GCP: High-availability multi-node deployments on Google Cloud

Cloud & Platform Integrations

• Kubernetes: Monitoring, GKE Workload Identity, Autopilot, cluster name detection, Postgres migration, and gateway load balancing

• Splunk: Route data from Splunk OTel Collectors and Universal Forwarders through Bindplane

• Claude Code Telemetry: Send Claude Code OpenTelemetry to Bindplane

• Logstash: Integrate Logstash pipelines with Bindplane

Authentication & User Management

• Add Users to Cloud: Add users to your Bindplane Cloud organization

• Azure LDAP: Active Directory integration via LDAP

• Change Authentication Type: Migrate between authentication methods

• Invites & Account Creation: Manage invites and accounts for Bindplane Cloud

Collector Management

• Bring Your Own Collector: Connect custom or third-party OpenTelemetry collectors via OpAMP extension or supervisor

• Downgrade Collector Privileges: Run collectors with reduced system privileges

• Golden Images & Ephemeral Collectors: Build golden images and configure ephemeral collector labels

• Linux Username Migration: Migrate from observiq-otel-collector to bdot user during collector v1.82 upgrade

• Migrate from ghcr.io: Switch container images from GitHub Container Registry to Docker Hub

Data Collection & Processing

• Batching Configuration Performance: Understand how batch processor placement affects throughput, CPU, and memory

• CTIME Formatting: Reference for CTIME timestamp format directives and patterns

• Modifying Log Body Timestamps: Convert and adjust timestamps within log bodies

• No Registered Transform Agents: Troubleshoot missing transform agent registrations

• Reduce Log Volume with Severity Filter: Filter logs by severity level to reduce volume

• Routing Telemetry: Route telemetry data to different destinations based on conditions

• Sysmon Logs: Capture Sysmon logs using the Windows Event source

• Windows DHCP/DNS Logs: Collect DHCP and DNS logs using Windows Event Trace

SIEM & Compliance

• Migrate from Microsoft Sentinel to Google SecOps: Add Google SecOps alongside Sentinel, shift sources, and decommission Sentinel

• Migrate from Splunk to Google SecOps: Add Google SecOps alongside Splunk, shift sources, and decommission Splunk

Security & TLS

• Using TLS: Quick start, certificate requirements, mTLS, gateway encryption, and troubleshooting

Infrastructure & Operations

• Postgres: Configure Postgres as a storage backend, including TLS setup

• GitOps: Manage Bindplane configuration through version control

• Create Configurations with Custom Resources via the API: Apply custom sources and destinations over the REST API, then build a configuration with POST /v1/apply

• Update Bindplane License: Apply or update your Bindplane license key

Getting Help

• Support Resources

• Support Bundle

• Slack Community