Centralized Logs using ELK (Elasticsearch, Logstash, Kibana) Stack
summary
Walks through installing and wiring Elasticsearch, Logstash, Kibana and using Filebeat to centralize syslogs: Filebeat ships logs from many hosts, Logstash parses and enriches with filters, Elasticsearch stores indexed logs and Kibana builds dashboards. Claims scale from dozens to hundreds of servers, shows Metricbeat for host metrics, and reports heavy disk and RAM use (order of 100 GB/month and large JVM heaps) so architecting indices, filters and retention is required for it to work in production.
AI-written summary · about
chapters (6)
- 0:00Introduction to ELK stack
- 3:46What is Elasticsearch
- 5:18How ELK processes logs
- 9:04Logstash filters and metrics
- 11:17Kibana for visualization
- 13:44Q&A and summary
