The ELK stack consists of the following components:
- Logstash: This is an open source logging framework similar to Log4j. The server component of Logstash processes incoming logs.
- Elasticsearch: This stores all of the logs and indexes them, as the name implies, for searching.
- Kibana: This is the web interface for the searching and visualization of logs.
To see how it works, we will follow a log message all the way from where it originates inside the code, through the intermediary network layers, to the end destination at the network operator's screen:
- Deep down in the code, a Java exception occurs. The application unexpectedly can't map a user ID present in an import file to the user IDs in the database. The following error ...