Archive for the ‘logstash’ Category

Kibana

Wednesday, March 28th, 2012

Kibana

From the webpage:

You have logs. Billions of lines of data. You shipped, dated it, parsed it and stored it. Now what do you do with it? Now you make sense of it. Kibana helps you do that. Kibana is an alternative browser based interface for Logstash and ElasticSearch that allows you to efficiently search, graph, analyze and otherwise make sense of a mountain of logs.

Any thoughts of what data you would map to such an interface? Or map to the aggregations that it offers?

Elasticsearch Using index templates & dynamic mappings

Saturday, February 4th, 2012

Elasticsearch Using index templates & dynamic mappings

Enables faceted searches of logs using logstash.

If you don’t know logstash, you might want to take a quick tour.

I found it interesting that you can now parse events on a TCP socket.

What you want to add to logs, events, etc., for mapping purposes is entirely up to you.