Software Architect's Handbook

Elasticsearch

Elasticsearch is an open-source, distributed search engine and document database that can store, search, and analyze data. Among its many uses, it can store all of the log data that your application produces.

Elasticsearch allows you to quickly search through data, and its capabilities include full-text querying. As your system grows, it can horizontally scale to handle large amounts of data, even if there are billions of log lines. It is easily extendable by adding nodes and resilient to failing nodes.

Elasticsearch can be configured so that it will send notifications based on certain conditions. Log data is continually monitored and, if the conditions are met, notifications can be sent to targets such as email or other incident ...