Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction
- Comprehensive overview of the Elastic Stack (ELK).
ELK Stack Architecture and Environment Review
- Analysis of the current Altor CB architecture.
- ELK components: Elasticsearch, Logstash, Kibana, and Beats.
- Differences between Ingest nodes and Logstash.
- Scalability and performance factors in on-premise deployments.
- Best practices for administration.
Beats for Distributed Monitoring
- Configuration and application of Filebeat, Auditbeat, Winlogbeat, and Packetbeat.
- Secure data shipping using SSL.
- Comparison of preconfigured modules versus custom inputs.
- Integration with Logstash and Ingest Pipelines.
Log Parsing and Ingestion from Applications and Databases
- Ingesting custom logs from various applications.
- Utilizing Logstash for data parsing and transformation.
- Application of filters: grok, dissect, kv, mutate, and date.
- Establishing database connections (Oracle, PostgreSQL, SQL Server) via the JDBC input plugin.
- Practical scenarios: error logs, audit trails, traces, and slow queries.
Advanced Search Techniques and Regular Expressions
- Advanced search syntax within Kibana.
- Implementing regular expressions (regex).
- Using filters and OR/AND logical combinations.
- Handling nested fields and arrays.
- Saving reusable queries and filters.
Custom Kibana Dashboards and Visualizations
- Visualization types: bar, line, maps, and tables.
- Working with aggregations and metrics.
- Implementing dynamic filters, controls, and drill-down capabilities.
- Sharing dashboards effectively.
- Exercises: Building dashboards from database and system logs.
Alerting and Email Notifications
- Overview of Watcher and alternative tools (ElastAlert, Kibana Alerts).
- Defining custom conditions and triggers.
- Configuring email outputs.
- Exercise: Triggering alerts for critical events in Windows or database logs.
User and Permission Administration
- Introduction to X-Pack and available free options.
- Creating users and defining roles.
- Access control at the index, dashboard, and query level.
- Exercise: Defining roles for audit and operations teams.
Elasticsearch REST API
- Foundations of the Elasticsearch RESTful API.
- Executing GET and POST queries.
- Manual and automated indexing processes.
- Utilizing tools such as curl and Postman.
- Exercises: Searching, inserting, deleting, and updating documents.
Requirements
- A solid understanding of the basic ELK Stack architecture and its components.
- Experience in ingesting and visualizing logs using Kibana and Logstash.
- Familiarity with the Linux command line and basic scripting.
Target Audience
- System administrators.
- Infrastructure engineers.
- Technical teams aiming for advanced log centralization capabilities.
Testimonials (2)
The theoretical material shown and the detail of the practices
CESAR - ALTOR CASA DE BOLSA
Course - Advanced ELK Stack for Log Management and Centralization
Machine Translated
the teachers' attitude of wanting to help us with our doubts
Roberto - ALTOR CASA DE BOLSA
Course - Advanced ELK Stack for Log Management and Centralization
Machine Translated
