This is a workshop and is aimed at using resources available on the web to help you understand how to install, manage, troubleshoot and be confident in going forward and discovering new features and be able to make them work.

We'll start from nothing and understand how each layer works and how they fit together, as well as how to scale for the enterprise

ON COMPLETION

  • Install an ELK stack
  • Identify what each part of the stack is responsible for
  • Understand how the API for Elasticsearch works
  • Install and configure Logstash, and understand how to write custom transformations to obtain better data for Kibana or other visualisation and statistical analysis tools
  • Use Kibana to identify your data, filter the data, create visualisation and dashboards across multiple datasets.
  • Understand the different configuration files and what they do for the service
  • Understand what Beats are and be able to install and configure to work with Elasticsearch
  • Import dashboards and data
  • Identify where the data is stored and clear data from a cluster

WHO SHOULD ATTEND?

You should have a working knowledge of Unix/Linux operating systems command line, e.g. BASH (this can be ran on Windows servers, but the majority of organisations run on Linux). Be able to edit a file from the command line using vi, nano or pico.

COURSE WORK

The course is designed to be majority hands on, guiding you through the build of an ELK stack and using web references direct from Elastic.co. Any theory will be explained through live drawn diagrams.

DURATION: 2 DAYS

PRICE: Please call for latest

Timing: Start 9:30am - Finish 5:00pm

Client provides environment for systems in the cloud, or we can provide VM images for VirtualBox to be installed and ran on your systems.

COURSE CONTENT

Overview

What is the ELK stack and overview, and how it communicates, ports, etc.

Introduction to Elasticsearch

What is Elasticsearch, how to install and configure it, using curl to work with the API and use the API to check and monitor that Elasticsearch is working.

Introduction to Kibana

What is Kibana, installing and configuring, connecting Kibana to Elasticsearch, installing some example data and reviewing the web UI. Filtering data and looking at views and dashboards.

Logstash

What is Logstash, installing and configuring, working with plugins, creating a data gathering configuration, checking that your data configuration will work (developer mode), connecting to Elasticsearch.

Finding your data in Kibana

Telling Kibana where your data is, managing and using your data, indexes and Lucene searches.

Logstash more on filtering

Formatting your data, using filter plugins such as grok, data types and fields, using custom patterns, mutating.

Kibana viewing your data

Create views and dashboards using your data. Working with data types.

Beats

What are beats, how to install and configure, viewing in Kibana.

Going forward

Ideas on how to scale your ELK stack for the enterprise, securing your ELK stack, Dev vs Prod ELK.