Implementing AWS: Design, Build, and Manage your Infrastructure

Analyzing CloudTrail Logs using Amazon Elasticsearch

Log management and analysis for many organizations starts and ends with just three letters: E, L, and K, which stands for Elasticsearch, Logstash, and Kibana. These three open-sourced products are essentially used together to aggregate, parse, search, and visualize logs at an enterprise scale:

• Logstash: Logstash is primarily used as a log collection tool. It is designed to collect, parse, and store logs originating from multiple sources, such as applications, infrastructure, operating systems, tools, services, and so on.
• Elasticsearch: With all the logs collected in one place, you now need a query engine to filter and search through these logs for particular events. That's exactly where ...