| persist.elasticsearch.auth.decl.method | Authentication method for connecting to Elasticsearch (NONE, BASIC, APIKEY). | NONE |
| persist.elasticsearch.auth.spec.apikey.id | API key ID for API key authentication (used only if method = APIKEY). | – |
| persist.elasticsearch.auth.spec.apikey.secret | API key secret for API key authentication (used only if method = APIKEY). | – |
| persist.elasticsearch.auth.spec.username | Username for BASIC authentication (used only if method = BASIC). | – |
| persist.elasticsearch.auth.spec.password | Password for BASIC authentication (used only if method = BASIC). | – |
| persist.elasticsearch.route.decl.method | Defines routing to Elasticsearch endpoint (BASIC = hostname/port, CLOUDID = Cloud ID). | BASIC |
| persist.elasticsearch.route.spec.cloudid | Elasticsearch Cloud ID (used only if route method = CLOUDID). | – |
| persist.elasticsearch.route.spec.hostname | Hostname for Elasticsearch endpoint (used only if route method = BASIC). | localhost |
| persist.elasticsearch.route.spec.port | Port for Elasticsearch endpoint (used only if route method = BASIC). | 9200 |
| persist.elasticsearch.route.spec.protocoll | Protocol to use for the connection (HTTP or HTTPS). | – |
| persist.elasticsearch.route.spec.security.type | Security protocol type applied when using secure connections. | – |
| persist.elasticsearch.write.spec.bulk.actions | Number of actions that trigger a flush of a new bulk request. | 500 |
| persist.elasticsearch.write.spec.bulk.flush.interval.sec | Interval (in seconds) for flushing a new bulk request. | 1 |
| persist.elasticsearch.write.spec.bulk.size.mb | Maximum size (in MB) of accumulated actions before flushing. | 1 |
| persist.elasticsearch.write.spec.concurrent.requests | Number of concurrent bulk requests allowed (0 = single request). | 1 |
| persist.elasticsearch.write.spec.processevents.index.name | Index name for storing process events. | distributed_monitoring_process_events |
| persist.elasticsearch.write.spec.systemevents.index.name | Index name for storing system events. | distributed_monitoring_system_events |