IT system monitoring is a proactive means of observing systems with the goal of preventing outages and downtime. It involves measuring current behavior against predetermined baselines. Some of the commonly monitored devices are CPU usage, memory usage, network traffic over routers and switches, and application performance, which helps a lot when performing root-cause analysis.
There are many systems out there, but not all can provide centralized, comprehensive monitoring. Sysadmins sometimes monitor their systems with scripting. Some use cron jobs when they write and configure their Bash scripts so that they receive an email when there is a change to the baseline. As someone exploring monitoring systems, I looked into the ELK Stack's set of applications as an option.
[ You might also like to read Using Cerebro as WebUI to manage an ELK cluster. ]
ELK is an acronym for several open source tools: Elasticsearch, Logstash, and Kibana. Elasticsearch is the engine of the Elastic Stack, which provides analytics and search functionalities. Logstash is responsible for collecting, aggregating, and storing data to be used by Elasticsearch. Kibana provides the user interface and insights into data previously collected and analyzed by Elasticsearch.
Elasticsearch
Elasticsearch provides real-time search and analytics for all data types, whether structured, unstructured, or numerical. It can efficiently store and index data in a way that enhances quick search and retrieval. It can also aggregate data to discover trends and patterns as the data and query volume grow. Elasticsearch is scalable, and as the data expands, the program deploys additional nodes to meet the demand. Because of its speed, Elasticsearch is a tremendous help in many instances, such as searching for a website or analyzing security events.
Logstash
Logstash collects data from multiple sources, transforms it, and then sends it to Elasticsearch for analysis. In short, it receives inputs and filters them down into helpful outputs for the other engines. Inputs primarily come from files, syslogs, and some lightweight log shippers called beats. Beats are small packages that are installed on target devices to feed information to Logstash. They may be in the form of Filebeats (logs and files), Packetbeats (network packet), Winlogbeats (Windows event logs), Metricbeats (system and service statistics), and others.
Logstash receives the files, filters the data, puts the files in a supported format, and then outputs them to Elasticsearch. It can also generate output to a file, graphic, or several other formats.
Kibana
Kibana, the last tool in the stack, is responsible for visualizing the data stored in Elasticsearch. Kibana allows you to explore the data as well as manage and monitor the entire ELK Stack. Kibana gives shape to your data and provides the means to navigate the ELK Stack. Kibana helps you search for hidden insights, then visualize what you find in charts, gauges, maps, and more. You can then combine this information into a dashboard. Kibana also monitors the ELK Stack's health. Finally, it controls users and their level of access in the ecosystem.
By default, Kibana comes with histograms, line graphs, pie charts, sunbursts, and more. It also supports highly available, scalable alerting via email, webhooks, Jira, Microsoft Teams, Slack, and other tools.
[ Free course: Red Hat Satellite Technical Overview. ]
Wrapping up
ELK is a comprehensive system that can help the sysadmin and the entire IT department. In my next article, I'll look at installing and configuring the stack and describe several real-world test scenarios.
Sull'autore
I work as Unix/Linux Administrator with a passion for high availability systems and clusters. I am a student of performance and optimization of systems and DevOps. I have passion for anything IT related and most importantly automation, high availability, and security.
Ricerca per canale
Automazione
Novità sull'automazione IT di tecnologie, team e ambienti
Intelligenza artificiale
Aggiornamenti sulle piattaforme che consentono alle aziende di eseguire carichi di lavoro IA ovunque
Hybrid cloud open source
Scopri come affrontare il futuro in modo più agile grazie al cloud ibrido
Sicurezza
Le ultime novità sulle nostre soluzioni per ridurre i rischi nelle tecnologie e negli ambienti
Edge computing
Aggiornamenti sulle piattaforme che semplificano l'operatività edge
Infrastruttura
Le ultime novità sulla piattaforma Linux aziendale leader a livello mondiale
Applicazioni
Approfondimenti sulle nostre soluzioni alle sfide applicative più difficili
Serie originali
Raccontiamo le interessanti storie di leader e creatori di tecnologie pensate per le aziende
Prodotti
- Red Hat Enterprise Linux
- Red Hat OpenShift
- Red Hat Ansible Automation Platform
- Servizi cloud
- Scopri tutti i prodotti
Strumenti
- Formazione e certificazioni
- Il mio account
- Supporto clienti
- Risorse per sviluppatori
- Trova un partner
- Red Hat Ecosystem Catalog
- Calcola il valore delle soluzioni Red Hat
- Documentazione
Prova, acquista, vendi
Comunica
- Contatta l'ufficio vendite
- Contatta l'assistenza clienti
- Contatta un esperto della formazione
- Social media
Informazioni su Red Hat
Red Hat è leader mondiale nella fornitura di soluzioni open source per le aziende, tra cui Linux, Kubernetes, container e soluzioni cloud. Le nostre soluzioni open source, rese sicure per un uso aziendale, consentono di operare su più piattaforme e ambienti, dal datacenter centrale all'edge della rete.
Seleziona la tua lingua
Red Hat legal and privacy links
- Informazioni su Red Hat
- Opportunità di lavoro
- Eventi
- Sedi
- Contattaci
- Blog di Red Hat
- Diversità, equità e inclusione
- Cool Stuff Store
- Red Hat Summit