Powering Monitoring Analytics with ELK stack - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Documents Associated With Scientific Events Year : 2015

Powering Monitoring Analytics with ELK stack

Frédéric Beck

Abstract

Machine-generated data, including logs and network flows, are considerably growing and their collection, searching, and visualization is a challenging task for (a) daily administrator activities and (b) researchers aiming to better find out analytics and insights from monitoring data regarding their research goals, including amongst others security or modeling of network and systems. This tutorial introduces the open source ELK stack and its components, including Elasticsearch for deep search and data analytics, Logstash for centralized logging, log enrichment, and parsing, and Kibana for powerful and beautiful data visualizations. ELK enables the analysis and visualization of monitoring data, such as logs and netflows. The first part of the tutorial details these individual components. The second part provides guidelines for the deployment and configuration of ELK components. In the third part participants will perform hands-on practical work for collecting, processing, and enriching logs and netflows, combined with the creation of associated visualization and dashboards aspects.
Fichier principal
Vignette du fichier
slides-ELK.pdf (737.12 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01212015 , version 1 (05-10-2015)

Identifiers

  • HAL Id : hal-01212015 , version 1

Cite

Abdelkader Lahmadi, Frédéric Beck. Powering Monitoring Analytics with ELK stack. 9th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2015), Jun 2015, Ghent, Belgium. 9th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2015), 2015. ⟨hal-01212015⟩
1587 View
4036 Download

Share

Gmail Facebook Twitter LinkedIn More