~/talk

Monitor your containers with the Elastic Stack

Talkat NDC London 2017 · 2017-01-16..01-20· [observability, devops-and-delivery]
slides:none on file

Shows how the Elastic Stack actually collects container data: use filebeat to tail Docker’s json-file logs or mounted volumes, choose syslog/journald/GELF alternatives, run metricbeat as a sidecar to read cgroups or use the Docker API (community dockbeat merged into metricbeat 5.x), and capture HTTP/DB wire metrics with packetbeat. Demonstrates Kibana dashboards, Elasticsearch storage tweaks for metrics, Docker images on Elastic’s registry (no latest tag), and warns about exposed ES instances and recommended firewall/proxy/security plugin fixes.

AI-written summary · about

  1. 0:00Start
  2. 0:47Who uses more than 10 servers / containers?
  3. 0:57How do you log?
  4. 1:42What are logs?
  5. 6:38Elastic Stack
  6. 9:54Filebeat
  7. 10:40At-Least-Once, Backpressure, and Graceful Downtime
  8. 13:08Multiline Filtering JSON Decode
  9. 13:55Logging with Docker 101 options
  10. 18:47Read cgroup data from /proc/ Part of the system module
  11. 19:04No Docker API access required Security
  12. 19:52Enriches process information automatically with cgroup data
  13. 21:29In Metricbeat 5.1+
  14. 24:34Packetbeat
  15. 45:13PS: Ransom
  16. 50:02Private network only Firewall
  17. 52:11Conclusion
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.