Elastic{ON} Tour Seattle - Machine Learning Deep Dive

Elastic{ON} Tour Seattle - October 5, 2017

Learn about Machine Learning and Beats such as packetbeat, metricbeat, and filebeat.

Christoph Wurm| Solutions Architect | Elastic

Transcript

1. Christoph Wurm Solutions Architect Machine Learning Deep Dive
2. 2 Fitting It In Understand Act Ingest
4. 4 Anomaly Detection in Time Series Data
5. 5 Anomalies == Trouble 2017-02-27 9:37am
7. 7 IT Operational Analytics
8. 8 DNS Are there signs of data exfiltration? packetbeat Traffic Is one of my users an insider threat? metricbeat Auth Logs Is a brute- force attack underway? filebeat Security Analytics
9. 9 Unusual spike in user latency Server woes or regional outage Rare event from sensor Failing device Metrics
10. 10 Dashboards aren’t enough
11. 11 Rules Don’t Scale • Where do you set the threshold? • Who updates the rules? • False positives are costly
12. 12 Ingest, Enrich, Visualize, Analyze, Alert Elasticsearch X-pack Master Nodes (3) Ingest Nodes (X) Data Nodes - Hot (X) Data Nodes - Warm (X) Beats Log Files Metrics Wire Data your(beat) Filebeat Module NGINX Kibana X-pack Instances (X)
13. Demo
14. 14 Click to edit Master subtitle style
15. 15 Click to edit Master subtitle style
16. 16 Click to edit Master subtitle style
17. Thank You