Elasticsearch, Logstash, and Kibana, also called the ELK stack, are three powerful tools. Elasticsearch is a search server where the data is stored and optimized for indexing. Logstash is a data (log) shipping and cleaning tool. Kibana is the front end for viewing and analyzing data. Each of them can be used as a standalone tool, but the combination of all of them makes a perfect combination for managing logs.
This chapter provides a quick introduction into each tool and explains how to combine them for effective log management. Topics covered in this chapter include the following:
Understanding the Elasticsearch index
Working with Elasticsearch data
Installing Elasticsearch plugins ...