nach oben

2016 | Buch

Beginning Elastic Stack

verfasst von: Vishal Sharma

Verlag: Apress

Enthalten in: Springer Professional "Wirtschaft+Technik" , Springer Professional "Technik" , Springer Professional "Wirtschaft"

Einloggen, um Zugang zu erhalten

Über dieses Buch

This book teaches you how to install, configure and implement the Elastic Stack (Elasticsearch, Logstash and Kibana) – the invaluable tool for anyone deploying a centralized log management solution for servers and apps. Supported by Puppet and available with various plugins, Elastic Stack is the best option for your server log management.

You will learn how to use and configure Elastic Stack independently and alongside Puppet. Each chapter includes real-world examples and practical troubleshooting tips, enabling you to get up and running with Elastic Stack in record time. Fully customizable and easy to use, Elastic Stack enables you to be on top of your servers all the time, and resolve problems for your clients as fast as possible. Get started with it using this book today.

What You Will Learn:How to install and configure Logstash

How to use Logstash with Elasticsearch and KibanaHow to use Logstash with Puppet and ForemanHow to centralize data processingWho This Book Is For:

Beginning Elastic Stack is for anyone working on multiple servers who needs to search their logs using a web interface. It is ideal for server administrators who have just started their job and need to look after multiple servers efficiently.

Inhaltsverzeichnis

Frontmatter

Chapter 1. Getting Started with Logstash

Abstract

Logstash is an open source tool designed to manage all of your server logs in a centralized location. This book includes detailed examples and insights that will help the novice install Logstash and use it like a pro. The book will also cover the other components of ELK Stack, such as Elasticsearch, Kibana, and Watcher and Shield. For this book, CentOS 7 and Ubuntu 16.0.4.1 LTS test server machines are Linode servers available from www.linode.com.

Vishal Sharma

Chapter 2. Getting Started with Elasticsearch

Abstract

Now that we’ve installed Logstash, we will move forward and install and configure Elasticsearch. Before we do this, let me explain first a little bit more about Elasticsearch.

Vishal Sharma

Chapter 3. Getting Started with Kibana

Abstract

In earlier chapters, we installed Logstash and Elasticsearch successfully. Searching logs manually in Logstash can be a bit of a tedious process for beginners. We need something with which we can search our logs easily and quickly. And now we have a tool that works with Elasticsearch to allow us to do just that—Kibana.

Vishal Sharma

Chapter 4. Working with Remote Servers

Abstract

In previous chapters, we installed Logstash, Elasticsearch, and Kibana. We configured an ELK Stack on a single server and also tested it. Running an ELK Stack on a single server, however, is not very useful. Our goal is to set up a centralized logging system for all of our servers, running at different locations and hosting web sites, web applications, ERP, and CRM systems. By setting up a centralized logging system, we can monitor the performance of our servers and analyze the logs for any issue that arises. Thus, in this chapter, you will see how we can ship events from remote servers to our ELK Stack server.

Vishal Sharma

Chapter 5. Configuring Logstash for Services and System Logs

Abstract

In the previous chapter, you learned how to configure Filebeat to send events to a centralized log server. In Chapter 3, you learned how to get events from the Apache access_log to your ELK Stack setup.

Vishal Sharma

Chapter 6. Graphite Monitoring and Graphs

Abstract

In previous chapters, you learned how to set up an ELK Stack and use the web-based interface Kibana to see the events from the data received by Logstash and Elasticsearch. You also configured remote hosts to send inputs to a centralized ELK Stack. Now a monitoring system keeps running for a longer period of time, and it keeps getting data from the services or server it’s monitoring. Monitoring systems generally don’t possess the functionality for long-term data analysis and storage. Fortunately, you can use Graphite with the ELK Stack, to gain more control over how you analyze your historical logs and data.

Vishal Sharma

Chapter 7. Configuring Elasticsearch Watcher

Abstract

In the previous chapter, you configured Graphite with Logstash to access time-based data and graphs to compare results. It’s also a good configuration for server admins to use to view and analyze the performance of services and applications.

Vishal Sharma

Chapter 8. Securing the ELK Stack with Shield

Abstract

By now you have ELK Stack configured and running. Nevertheless, we still haven’t addressed the most important part: security. When you deploy ELK Stack to a production environment, you cannot let the world have access to your data. You need a system and a set of restrictions for accessing your data. Today, when hackers, script kiddies, and bots are scouring the Internet for private corporate information, you must make sure that your data is secure and know just who is accessing that data and what they are retrieving.

Vishal Sharma

Chapter 9. Logstash Plug-ins

Abstract

Logstash has many input plug-ins and codecs. All of the plug-ins are available as gems and hosted on rubygems.org. All of the plug-ins can be managed by bin/logstash-plugin. Using this script, you can install, uninstall, and remove plug-ins.

Vishal Sharma

Chapter 10. Managing the ELK Stack with Puppet and Foreman

Abstract

At this point, you have learned about the ELK Stack in depth. Next let’s move on to how to use a configuration-management tool and how you can build the ELK Stack setup using the tool. The configuration-management tool is called Puppet, from Puppet Labs, and server administrators use it to automate, configure, and manage server infrastructure.

Vishal Sharma

Backmatter

Titel: Beginning Elastic Stack
verfasst von: Vishal Sharma
Verlag: Apress
Electronic ISBN: 978-1-4842-1694-1
Print ISBN: 978-1-4842-1693-4
DOI: https://doi.org/10.1007/978-1-4842-1694-1