Linux Administration Cookbook

Centralizing logging with the Elastic Stack

Earlier, we mentioned solutions to remote logging that involved forwarding our logging solutions (syslog and journald) to other hosts, running the same or similar software, so that the logs could be aggregated in one spot.

This is a nice solution, and works well in a small environment, but it's not got a lot of bells and whistles, and if there's one thing we like in IT, it's shiny things we can show to management and then never use.

Elastic Stack is one such product; in their own words:

Built on an open source foundation, the Elastic Stack lets you reliably and securely take data from any source, in any format, and search, analyze, and visualize it in real time.

Bold claims, but certainly with backing. ...