ELK Stack

Search, collect and visualise logs and data with Elasticsearch, Logstash and Kibana.

Overview

The ELK Stack is a set of tools for centralised logging and search. Elasticsearch stores and searches the data, Logstash (or lightweight Beats shippers) collects and transforms it, and Kibana turns it into dashboards and charts.

It is widely used to monitor applications, investigate errors and analyse large volumes of log and event data in one place.

Where it is used

  • Application and server log management
  • Application monitoring and troubleshooting
  • Security and audit log analysis
  • Business and website analytics

Getting started

  1. Install Elasticsearch and Kibana (packages or the official Docker images; see the Elastic documentation for the current compose files).
  2. Start Elasticsearch and open Kibana in your browser.
  3. Ship logs with Filebeat or Logstash into an index.
  4. Create a data view in Kibana and build your first dashboard.

What you will cover

The key topics and features of ELK Stack

Elasticsearch

A fast, scalable search and analytics engine.

Logstash & Beats

Collect, parse and ship logs from many sources.

Kibana

Explore data and build dashboards and alerts.

Centralised Logging

All application and server logs in one searchable place.

Scalable

Grows from a single node to a cluster.

Near Real-Time

Search and visualise data seconds after it arrives.