# Sink Connector

Sinks for events such as Data Lakes and Security Lakes. Products in this category accept events but do not support querying them back out.

## API Reference

For full API documentation see the [Sink API Reference](/api-reference/connectors/sink).

To create an integration with the Sink connector, use the [Create Integration API](/api-reference/management/integrations/integrations_create) endpoint, using one of the provider configs below.

## Supported Providers

- Amazon S3 (`sink_aws_s3`)
- Amazon Security Lake (`sink_aws_security_lake`)
- Amazon Simple Queue Service (SQS) (`sink_aws_sqs`)
- CrowdStrike Falcon® Next-Gen SIEM (HEC) (`sink_crowdstrike_hec`)
- Elasticsearch (`sink_elasticsearch`)
- Google Security Operations (Chronicle Compatibility) (`sink_google_sec_ops`)
- Google Security Operations (`sink_google_security_operations`)
- IBM QRadar Sink (`sink_q_radar`)
- Microsoft Azure Monitor Logs (`sink_azure_monitor_logs`)
- OpenSearch (`sink_opensearch`)
- Splunk Enterprise Security (`sink_splunk`)
- Synqly Test Provider (`sink_mock_sink`)


## Supported Operators by Provider

| API | Amazon S3 | Amazon Security Lake | Amazon SQS | Microsoft Azure Monitor Logs | CrowdStrike Next-Gen SIEM (HEC) | Elasticsearch | Google Security Operations | Google Security Operations | Test Provider | OpenSearch | IBM QRadar Sink | Splunk Enterprise Security |
|  --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| post_events | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |


## APIs with Filters

| API | Amazon S3 | Amazon Security Lake | Amazon SQS | Microsoft Azure Monitor Logs | CrowdStrike Next-Gen SIEM (HEC) | Elasticsearch | Google Security Operations | Google Security Operations | Test Provider | OpenSearch | IBM QRadar Sink | Splunk Enterprise Security |
|  --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |