Upgrade to Pro — share decks privately, control downloads, hide ads and more …

はじめての Elasticsearch

Kunihiko Kido
November 10, 2014

はじめての Elasticsearch

Kunihiko Kido

November 10, 2014
Tweet

More Decks by Kunihiko Kido

Other Decks in Technology

Transcript

  1. ͸͡Ίͯͷ
    &MBTUJDTFBSDI!
    ,VOJIJLP,JEP
    LJEP!LOPXMFEHFXPSLTDPKQʗ!
    ,OPXMFEHF8PSLT *OD

    View full-size slide

  2. "HFOEB
    w &MBTUJDTFBSDIͱ͸ʁ
    w ݕࡧํࣜʹΑΔ෼ྨ
    w ݕࡧΤϯδϯʹΑΔ෼ྨ
    w &MBTUJDTFBSDIͷಛ௃
    w ࢖༻։࢝͢Δ̏εςοϓ
    w ॏཁͳߏ੒ཁૉ
    w ࿦ཧతͳཁૉ
    w ෺ཧతͳཁૉ
    w "1*ૢ࡞ͷجຊ
    w υΩϡϝϯτͷొ࿥
    w υΩϡϝϯτͷݕࡧ
    w υΩϡϝϯτͷ࡟আ
    w &MBTUJDTFBSDI"1*T
    w .BQQJOH
    w "HHSFHBUJPO
    w 1FSDPMBUPS
    w ϓϥάΠϯ
    w ϩάऩूϛυϧ΢ΣΞ
    w ,JCBOBʢՄࢹԽπʔ
    ϧʣ

    View full-size slide

  3. &MBTUJDTFBSDIͱ͸ʁ
    w &MBTUJDTFBSDI͕ࣾఏڙ͢ΔɺΦʔϓϯιʔεͷݕࡧΤϯδϯͰ͢ɻϑϦʔϫʔυݕࡧ΍ߜΓࠐΈɺιʔτͳͲͷجຊత
    ͳݕࡧػೳͷ΄͔ɺBHHSFHBUJPOͱݺ͹ΕΔڧྗͳϦΞϧλΠϜ෼ੳʢूܭʣͳͲͷߴ౓ͳݕࡧػೳͷఏڙ΍ɺΫϥ΢
    υ؀ڥʹ࠷దԽ͞Εͨ෼ࢄॲཧ΍ߴՄ༻ੑɺ"1*ۦಈɺεϚʔϑϦʔɺϚϧνςφϯγʔͳͲͷಛ௃Λ͍࣋ͬͯ·͢ɻ
    ʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙʙ
    ϑϦʔϫʔυݕࡧʗαδΣετ
    ιʔτ
    ϋΠϥΠτ
    ϖʔδϯά
    ߜΓࠐΈ
    ूܭ

    View full-size slide

  4. ݕࡧํࣜʹΑΔ෼ྨ
    w ॱ࣍ݕࡧ
    w ̍࡭ͷຊʹྫ͑ΔͳΒɺຊͷ̍ϖʔδ໨͔Βॱ࣍୯ޠΛ୳͢Πϝʔδ
    w "ςΩετΤσΟλͷݕࡧɺHSFQίϚϯυɺ3%#ͷ-JLFݕࡧͳͲ
    w ࡧҾݕࡧ#&MBTUJDTFBSDI
    w ̍࡭ͷຊʹྫ͑ΔͳΒɺຊͷ຤ඌʹ͋ΔࡧҾ͔ΒϖʔδΛ୳͢Πϝʔδ
    w " ͍ΘΏΔશจݕࡧΤϯδϯͱݺ͹ΕΔιϑτ΢ΣΞ
    ݕࡧ଎౓


    ରԠՄೳͳن໛


    ࣄલ४උ
    ෆཁ
    ඞཁ

    View full-size slide

  5. ݕࡧΤϯδϯʹΑΔ෼ྨ
    w ݕࡧϥΠϒϥϦ
    w " -VDFOFͳͲ
    w ݕࡧαʔόʔ#&MBTUJDTFBSDI
    w " 4PMSɺHSPPOHBɺͳͲ
    w ݕࡧγεςϜ
    w " SharePointͳͲ
    ݕࡧؔ࿈ͷ஌ࣝ೉қ౓
    ߴ
    ௿
    ػೳͷ๛෋͞


    ద༻ൣғ
    ޿
    ڱ
    &MBTUJDTFBSDI͸ɺओʹΞϓϦέʔγϣϯͷόοΫΤϯυͳͲͰར༻͢ΔͨΊͷݕࡧΤϯδϯαʔ
    όʔʹ෼ྨ͞Ε·͢ɻ·ͨɺϓϥάΠϯΛΠϯετʔϧ͢Δ͜ͱͰɺ֦ு͢Δ͜ͱ͕Ͱ͖·͢ɻ

    View full-size slide

  6. &MBTUJDTFBSDIͷಛ௃
    w ϦΞϧλΠϜσʔλ
    w ΄΅ϦΞϧλΠϜʹΠϯσοΫεɻ
    w ϦΞϧλΠϜ෼ੳ
    w σʔλΛूܭ͢ΔͨΊͷػೳ͕ॆ࣮ɻ
    w ෼ࢄॲཧγεςϜ
    w ̍୆ͷখ͞ͳγεςϜߏ੒͔Βɺن໛ʹԠͯ͡ෳ਺୆
    ͷϊʔυߏ੒ʹΑΔ֦ுɻ
    w ߴՄ༻ੑ
    w ো֐͕ൃੜͨ͠ϊʔυΛࣗಈతʹ੾Γ཭ͯ͠ɺ҆શʹ
    ΫϥελʔΛ࠶ߏ੒ɻ
    w Ϛϧνςφϯγʔ
    w ̍ͭͷΫϥελʔ͸ෳ਺ͷΠϯσοΫε͕࡞੒Մೳɻ
    ΤΠϦΞεΛ࢖ͬͯݕࡧର৅Λίϯτϩʔϧ
    w ߴ౓ͳݕࡧػೳ
    w શจݕࡧɺଟݴޠαϙʔτɺڧྗͳΫΤϦݴޠɺ(&0
    ϩέʔγϣϯɺ΋͔ͯ͠͠ʁɺϓϨϑΟοΫεαδΣ
    ετͳͲߴ౓ͳݕࡧΛαϙʔτɻ
    w υΩϡϝϯτࢤ޲
    w ߏ଄Խ͞Εͨ+40/υΩϡϝϯτͱͯ͠ɺෳࡶͳσʔ
    λߏ଄ΛΠϯσοΫεՄೳɻσϑΥϧτͰ͸͢΂ͯͷ
    ϑΟʔϧυ͕ΠϯσοΫε͞Εɺ୯ҰͷΫΤϦʔͰݕ
    ࡧɺฦ٫Մೳɻ

    View full-size slide

  7. &MBTUJDTFBSDIͷಛ௃
    w িಥ؅ཧ
    w ָ؍తͳόʔδϣϯ؅ཧʹΑͬͯɺෳ਺ͷϓϩηε͔
    ΒͷมߋॲཧʹΑΔিಥΛճආ
    w εΩʔϚϑϦʔ
    w +40/υΩϡϝϯτ͔Βࣗಈతʹͦͷσʔλߏ଄Λݕ
    ग़ͯ͠ΠϯσοΫεΛ࡞੒͠·͢ɻ·ͨɺඞཁʹΑͬ
    ͯεΩʔϚఆٛΛΧελϚΠζ͢Δ͜ͱ΋Մೳɻ
    w 3FTUGVM"1*
    w &MBTUJDTFBSDI͸"1*ۦಈͰ͢ɻ΄ͱΜͲͷૢ࡞͸γ
    ϯϓϧͳ3FTUGVM"1*Λ࢖༻ͯ͠ίϯτϩʔϧͰ͖Δ
    ͨΊɺ։ൃʹ͸+BWB΍3VCZɺ1ZUIPOͳͲࣗ༝ʹબ
    ୒͢Δ͜ͱ͕Ͱ͖·͢ɻ
    w ૢ࡞୯ҐͰͷӬଓੑ
    w τϥϯβΫγϣϯϩάʹΑΔૢ࡞୯ҐͰͷӬଓੑͷ֬

    w Φʔϓϯιʔεʢ"QBDIF-JDFOTFʣ
    w ແঈͰ࢖༻ɾमਖ਼Ͱ͖Δ"QBDIF഑ԼͰ഑෍͞Ε
    ͍ͯ·͢ɻ
    w -VDFOFϕʔε
    w 4PMSͱಉ͡-VDFOFΛ࢖༻

    View full-size slide

  8. ࢖༻։࢝͢Δ̏εςοϓ
    w &MBTUJDTFBSDIΛ࢖༻։࢝͢Δʹ͸ɺ࣍ͷεςοϓɻ
    w ˞ͦͷଞɺBQU΍ZVNΛ࢖༻ͨ͠Πϯετʔϧํ๏΋༻ҙ͞Ε͍ͯ·͢ɻ

    μ΢ϯϩʔυͯ͠ղౚ͢Δɻ
    ࠷৽൛ɿIUUQXXXFMBTUJDTFBSDIPSH
    PWFSWJFXFMLEPXOMPBET
    $
    ίϚϯυͰىಈ͢Δɻ
    CJOFMBTUJDTFBSDI
    %
    "1*Ͱૢ࡞͢Δɻ
    (&51651045%&-&5&)&"%
    !

    View full-size slide

  9. ॏཁͳߏ੒ཁૉ

    View full-size slide

  10. ࿦ཧతͳཁૉ
    *OEFY
    lCPPLTUPSFz
    5ZQF
    lCPPLTz
    5ZQF
    lNBHB[JOFTz
    5ZQF
    lVTFSTz
    %PDVNFOUT %PDVNFOUT %PDVNFOUT
    'JFMET 'JFMET 'JFMET
    㲈%BUBCBTF
    㲈5BCMF
    㲈3PX
    㲈$PMVNO
    &MBTUJDTFBSDI
    3FMBUJPOBM%#
    *OEFY΋ෳ਺ఆٛՄೳ
    3FMBUJPOBM%#
    3FMBUJPOBM%#
    3FMBUJPOBM%#
    "MJBT
    lBMM@CPPLTz
    "MJBT
    lOFX@CPPLTz
    "MJBT
    lTBMF@CPPLTz
    㲈7JFX
    3FMBUJPOBM%#

    View full-size slide

  11. ෺ཧతͳཁૉ
    /PEF
    1SJNBSZ
    4IBSE
    lCPPLTUPSFz
    3FQMJDB
    4IBSE
    lCPPLTUPSFz
    /PEF
    3FQMJDB
    4IBSE
    lCPPLTUPSFz
    1SJNBSZ
    4IBSE
    lCPPLTUPSFz
    /PEF
    3FQMJDB
    4IBSE
    lCPPLTUPSFz
    1SJNBSZ
    4IBSE
    lCPPLTUPSFz
    &MBTUJDTFBSDI$MVTUFS
    ̍ͭͷ࿦ཧతͳΠϯσοΫε͸
    ̍ͭҎ্ͷ1SJNBSZ
    4IBSE͔Βߏ੒͞Ε·͢ɻ
    ̍ͭͷ1SJNBSZ4IBSE͸
    ̌ݸҎ্ͷ3FQMJDB4IBSE
    ʢಡΈऔΓઐ༻ʣΛ࣋ͭ͜ͱ͕Ͱ͖·͢ɻ
    1SJNBSZ4IBSEͷ਺͸Ұ౓ΠϯσοΫεΛ࡞੒ͯ͠͠
    ·͏ͱ૿΍͢͜ͱ͕Ͱ͖·ͤΜɻ
    3FQMJDB4IBSEͷ਺͸ΠϯσοΫε࡞੒ޙ΋૿΍͢͜
    ͱ͕Ͱ͖·͢ɻ
    /PEF͸$MVTUFSΛߏ੒͢Δ࠷খ୯ҐͰ͢ɻ
    /PEF਺㲈αʔόʔ਺

    View full-size slide

  12. *OEFYઃܭ࣌ͷߟྀ఺
    w େن໛ͳσʔλΛߟྀ͢Δ৔߹
    w ಉ͡σʔλιʔεͰ΋େྔͷσʔλ਺͕૝ఆ͞ΕΔ৔߹ɺ
    1SJNBSZ4IBSE਺ͷ֦ு͕Ͱ͖ͳ͍ͨΊɺ͋Β͔͡Ί*OEFY
    ϨϕϧͰ෼ׂ͢Δઃܭ͕ඞཁɻ
    w ྫ͑͹
    w ϩάͰ͋Ε͹݄ɺ೔୯ҐͳͲͰΠϯσοΫεΛ࡞੒͢
    ΔΑ͏ʹઃܭ
    w 5XFFUσʔλͰ͋Ε͹ɺϢʔβʔ୯Ґ·ͨ͸೔୯Ґɺ
    ͳͲͰΠϯσοΫεΛ࡞੒͢ΔΑ͏ʹઃܭ
    w ো֐ͷӨڹൣғΛߟྀ͢Δ৔߹
    w ਺ेສɺ਺ඦສ݅ͷσʔλͰ͋ͬͯ΋ɺো֐ͷӨڹൣғΛ
    ߟྀ͍ͨ͠৔߹͸ɺ*OEFYϨϕϧͰ෼ׂ͢Δઃܭ͸༗ޮɻ
    w ྫ͑͹
    w ਺ඦສ݅ͷෆಈ࢈௞ି෺݅৘ใΛ౎ಓ෎ݝผʹΠϯσο
    ΫεΛ࡞੒͢ΔΑ͏ʹઃܭ
    w ਺ेສ݅ͷϨετϥϯళฮ৘ใΛσʔλιʔεݩͱຖ
    ʹΠϯσοΫεΛ࡞੒͢ΔΑ͏ʹઃܭ
    w ਺ेສ݅ͷ঎඼৘ใΛΧςΰϦผʹΠϯσοΫεΛ࡞
    ੒͢ΔΑ͏ʹઃܭ
    w શ͘ҟͳΔ༻్ͷσʔλͷ৔߹
    w খن໛Ͱ͋Ε͹ಉ͡*OEFY಺ʹ5ZQFͰ෼ׂͨ͠ઃܭͰ΋ྑ
    ͍͕ɺԣஅͯ͠ݕࡧ͍ͨ͠৔߹ʹ͸"MJBT΋࢖༻Ͱ͖ΔͷͰɺ
    *OEFYͰ෼ׂͨ͠ํ͕ॊೈɻ

    View full-size slide

  13. "1*ͷجຊૢ࡞

    View full-size slide

  14. υΩϡϝϯτͷొ࿥
    w ৽نʹΠϯσοΫεͷ࡞੒͢Δ
    w ҎԼͷྫͰ͸ɺlCMPHzͱݴ͏໊લͷΠϯσοΫεΛ࡞੒͠ɺͦͷΠϯσοΫε಺ʹlQPTUTzͱݴ͏໊લͷλΠϓΛఆٛɺ
    lUJUMFzɺzEFTDSJQUJPOzɺzDSFBUPSzɺzMJOLzɺzQVC%BUFzͱݴ͏̑ͭͷϑΟʔϧυΛ࣋ͭυΩϡϝϯτ*%͕zzͷσʔλ
    ΛΠϯσοΫε͍ͯ͠·͢ɻ
    $ curl -XPUT ‘localhost:9200/blog/posts/1' \
    -d '{
    "title": "Elasticsearch ಛ௃·ͱΊ",
    "description": "Elasticsearch Features — ओʹγεςϜΛத৺ͱͨ͠ಛ௃·ͱΊ",
    "creator": "Kunihiko Kido",
    "link": "https://medium.com/hello-elasticsearch/elasticsearch-500996e47c70",
    "pubDate": "2014-03-12T11:09"
    }'
    ΠϯσοΫε໊
    λΠϓ໊
    υΩϡϝϯτ*%
    υΩϡϝϯτͷ಺༰ʢ+40/ʣ
    ˞ࣄલʹϚοϐϯάఆٛʢεΩʔϚఆٛʣΛͯ͠ϑΟʔϧυͷܕ΍ݴޠॲཧͳͲΛઃఆ͢Δ͜ͱ΋ՄೳͰ͢ɻ·ͨɺ̍υ
    Ωϡϝϯτ͝ͱʹొ࿥͢Δํ๏ͷଞɺෳ਺ͷυΩϡϝϯτΛҰׅͰొ࿥"1*ͳͲ͕ఏڙ͞Ε͍ͯ·͢ɻ

    View full-size slide

  15. υΩϡϝϯτͷݕࡧ
    w ৚݅Λࢦఆͯ͠ݕࡧ͢Δ
    w ҎԼͷྫͰ͸ɺzCMPHzΠϯσοΫε಺ͷzQPTUTzλΠϓΛର৅ʹɺzDSFBUPSzϑΟʔϧυʹzLJEPzͱݴ͏୯ޠΛؚΉυ
    ΩϡϝϯτΛݕࡧ͍ͯ͠·͢ɻ
    $ curl -XPOST ‘localhost:9200/blog/posts/_search' \
    -d '{
    "query": {
    "term": {

    "creator": "kido"

    }
    }
    }'
    ΠϯσοΫε໊ʢলུՄʣ
    λΠϓ໊ʢলུՄʣ
    ݕࡧ৚݅ʢ+40/ʣ
    ݕࡧ༻ͷ3FTUΤϯυϙΠϯτ
    ˞ݟͯͷ௨Γɺݕࡧ৚݅΋+40/Ͱߏ଄తʹهड़Ͱ͖ΔͷͰɺϓϩάϥϚςΟοΫʹ૊ΈཱͯΔ͜ͱ͕Ͱ͖ɺΫΤϦʔε
    τϦϯάͰهड़͢Δͷʹൺ΂෼͔Γ΍͘͢ɺϝϯςφϯε΋͠΍͍͢Ͱ͢ɻ

    View full-size slide

  16. υΩϡϝϯτͷ࡟আ
    w υΩϡϝϯτ*%Λࢦఆͯ͠࡟আ͢Δ
    w ҎԼͷྫͰ͸ɺlCMPHzΠϯσοΫε಺ͷzQPTUTzλΠϓʹΠϯσοΫε͞Ε͍ͯΔυΩϡϝϯτ*%͕zzͷυΩϡϝϯ
    τΛ࡟আ͍ͯ͠·͢ɻ
    $ curl -XDELETE ‘localhost:9200/blog/posts/1'
    ΠϯσοΫε໊
    λΠϓ໊
    υΩϡϝϯτ*%
    %&-&5&ϝιου
    ˞υΩϡϝϯτͷ࡟আʹ͍ͭͯ͸ɺ͜ͷ΄͔ʹෳ਺ͷυΩϡϝϯτΛҰׅͰ࡟আ͢Δํ๏΍ɺݕࡧ৚݅Λ࢖༻ͯ͠࡟আ͢
    Δํ๏ɺυΩϡϝϯτʹ55-Λઃఆͯ͠ɺࣗಈతʹ࡟আ͢Δํ๏ͳͲ͕ఏڙ͞Ε͍ͯ·͢ɻ

    View full-size slide

  17. &MBTUJDTFBSDI"1*T
    w "MJBT.BOBHFNFOU"1*T
    w $BU"1*Tʢ˞͜Ε͚ͩͪΐͬͱಛघɻਓ͕ݟΔ༻ʣ
    w $MVTUFS"1*T
    w %PDVNFOU"1*T
    w *OEFY.BOBHFNFOU"1*T
    w *OEFY4FUUJOHT"1*T
    w .BQQJOH.BOBHFNFOU"1*T
    w .POJUPSJOH"1*T
    w 3JWFS"1*T
    w 4FBSDI"1*T
    w 4UBUVT.BOBHFNFOU"1*T
    &MBTUJDTFBSDIΛૢ࡞͢ΔͨΊͷ༷ʑͳ"1*͕ఏڙ͞Ε͍ͯ·͢ɻ
    ΄ͱΜͲͷૢ࡞͕͜ΕΒͷ"1*Λ࢖༻࣮ͯ͠ߦՄೳͰ͢ɻ

    View full-size slide

  18. .BQQJOHͱ͸ʁ
    w .BQQJOH㲈ςʔϒϧఆٛʢ3FMBUJPOBM%#ʣ
    w *OEFY಺ͷ5ZQFຖʹυΩϡϝϯτͷϑΟʔϧυଐੑɺݴޠॲཧղੳํ๏ͳͲΛఆٛ͢ΔͨΊͷ΋ͷ
    w ఆٛ͢Δ಺༰
    w ओʹɺϑΟʔϧυຖͷɺܕͷઃఆʢTUSJOH JOUFHFSMPOH qPBUEPVCMF CPPMFBO OVMM ͳͲͳͲʣɺ"OBMZ[FSͷઃఆʢΠϯσοΫεଆʗαʔ
    νଆʣͳͲΛఆٛ͢Δɻ
    w ಈతͳఆٛ
    w ϑΟʔϧυ͕ఆٛ͞Ε͍ͯͳ͚Ε͹ɺυΩϡϝϯτͷ಺༰ʹΑͬͯಈతʹఆٛ͞ΕΔɻ
    w ಈతʹఆٛ͞ΕΔ಺༰΋ΧελϚΠζՄೳɻ
    w ੩తͳఆٛ
    w υΩϡϝϯτΛΠϯσοΫε͢ΔલͰ͋Ε͹ɺࣄલʹఆٛՄೳɻ
    w ݕࡧͷਫ਼౓Λ޲্͢Δʹ͸"OBMZ[FSͷఆٛͱ࢖͍෼͚͕ॏཁɻ

    View full-size slide

  19. "OBMZ[FSʹ͍ͭͯ
    w "OBMZ[FSͱ͸ɺΠϯσοΫε࣌·ͨ͸ݕࡧ࣌ʹ࢖༻͢ΔɺݴޠղੳॲཧηοτͰ͢ɻσϑΥϧ
    τͷ"OBMZ[FSΛ࢖༻͢Δํ๏ͱɺΧελϚΠζͨ͠"OBMZ[FSΛఆٛͯ͠࢖༻͢Δํ๏͕͋Γ·͢ɻ
    & & & & & & &
    $IBSpMUFST 5PLFOpMUFST
    5PLFOJ[FS
    ' (
    " "
    "OBMZ[FS
    l+BQBOFTFz
    )5.-λάআ֎
    શ֯൒֯Λ౷Ұ
    FUD
    ೔ຊޠΛ୯ޠʹ෼ׂ
    ಉٛޠΛల։
    ෆཁͳ඼ࢺΛআڈ
    ΠϯσοΫε࣌ɿϑΟʔϧυͷ಺༰
    ݕࡧ࣌ɿΩʔϫʔυ
    FUD
    ˞ ̍ͭͷϑΟʔϧυͰҟͳΔ"OBMZ[FSΛ࢖༻͍ͨ͠৔߹͸ɺϚϧνϑΟʔϧυ͕ศརɻ
    ղੳॲཧޙͷσʔλΛ࢖༻ͯ͠ɺ
    ΠϯσοΫεԽ·ͨ͸ݕࡧɻ
    ˞ूܭ΍ɺιʔτ΋͜ͷ୯Ґ

    View full-size slide

  20. "OBMZ[FSઃܭ࣌ͷߟྀ఺
    w ܗଶૉղੳͰݕࡧ͍ͨ͠৔߹΍ɺ/άϥϜํࣜͰݕࡧ͍ͨ͠৔߹ͳͲݕࡧཁ݅ͷ΄͔ɺ"OBMZ[FSͷઃܭɾઃ
    ఆʹ͸ҎԼͷ಺༰΋ߟྀ͢Δඞཁ͕༗Γ·͢ɻ
    w จࣈྻϑΟʔϧυͷूܭ୯Ґ
    w 'BDFU΍"HHSFHBUJPOͷूܭʹ͸ɺ"OBMZ[FSͰղੳॲཧޙͷτʔΫφΠζ͞Εͨ୯ޠ୯ҐͰूܭ͞Ε·͢ɻϑΟʔϧυͷ஋ͦͷ΋ͷͰू
    ܭ͍ͨ͠৔߹Ͱ͸ɺOPU@BOBMZ[FEઃఆ·ͨ͸ɺτʔΫφΠζ͞Εͳ͍"OBMZ[FSΛઃఆ͢Δඞཁ͕͋Γ·͢ɻ
    w จࣈྻϑΟʔϧυͷιʔτ
    w จࣈྻϑΟʔϧυͷूܭಉ༷ɺιʔτʹ͸"OBMZ[FSͰղੳॲཧޙͷ࠷ॳͷ୯ޠ͕࢖༻͞Ε·͢ɻϑΟʔϧυͷ஋ͦͷ΋ͷͰιʔτʢϑϧιʔ
    τʣ͍ͨ͠৔߹͸ɺOPU@BOBMZ[FEઃఆ·ͨ͸ɺτʔΫφΠζ͞Εͳ͍"OBMZ[FSΛઃఆ͢Δඞཁ͕͋Γ·͢ɻ
    w ಉٛޠͷద༻
    w ಉࣙ͡ॻͷ಺༰Ͱ͋Ε͹ɺΠϯσοΫε࣌·ͨ͸ɺݕࡧ࣌ͷ͍ͣΕ͔͚ͩͰద༻͢΂͖Ͱ͢ɻ
    w ҟͳΔจࣈྻʢ୯ҐʣͰͷूܭɾιʔτ
    w ྫ͑͹ɺ౎ಓ෎ݝϑΟʔϧυͷσʔλΛ࢖༻ͯ͠ɺzؔ౦zͳͲͷผͷ୯Ґͷूܭ΍ɺ౎ಓ෎ݝίʔυͰͷιʔτͳͲΛ࣮ݱ͍ͨ͠৔߹ɺ
    "OBMZ[FSΛ࢖༻ͯ͠ɺม׵͢Δ͜ͱ΋ՄೳͰ͢ɻ

    View full-size slide

  21. "HHSFHBUJPO
    ʢϦΞϧλΠϜूܭʣ

    View full-size slide

  22. "HHSFHBUJPOͱ͸ʁ
    w NJOBHHSFHBUJPO
    w NBYBHHSFHBUJPO
    w TVNBHHSFHBUJPO
    w BWHBHHSFHBUJPO
    w TUBUTBHHSFHBUJPO
    w FYUFOEFETUBUTBHHSFHBUJPO
    w WBMVFDPVOUBHHSFHBUJPO
    w QFSDFOUJMFTBHHSFHBUJPO
    w QFSDFOUJMFSBOLT
    BHHSFHBUJPO
    w DBSEJOBMJUZBHHSFHBUJPO
    w HFPCPVOETBHHSFHBUJPO
    w UPQIJUTBHHSFHBUJPO
    w HMPCBMBHHSFHBUJPO
    w pMUFSBHHSFHBUJPO
    w NJTTJOHBHHSFHBUJPO
    w OFTUFEBHHSFHBUJPO
    w SFWFSTFOFTUFEBHHSFHBUJPO
    w UFSNTBHHSFHBUJPO
    w TJHOJpDBOUUFSNT
    BHHSFHBUJPO
    w SBOHFBHHSFHBUJPO
    w EBUFSBOHFBHHSFHBUJPO
    w JQWSBOHFBHHSFHBUJPO
    w IJTUPHSBNBHHSFHBUJPO
    w EBUFIJTUPHSBNBHHSFHBUJPO
    w HFPEJTUBODFBHHSFHBUJPO
    w HFPIBTIHSJEBHHSFHBUJPO
    όʔδϣϯ͔Βར༻ՄೳͳػೳͰ͢ɻ࣍ੈ୅ϑΝηοτͱ΋ݺ͹ΕΔ֊૚తͳूܭ΍ಈతͳू
    ܭɺάϧʔϓԽͳͲڧྗͳूܭػೳ͕ఏڙ͞Ε͍ͯ·͢ɻ
    ྫ͑͹ɺ৭Ͱ෼ྨͯͦ͠ͷ৭ຖͷฏۉՁ֨ΛٻΊͨΓɺ֤δϟϯϧͷτοϓ̍̌ͷݕࡧ݁ՌΛٻΊͨ
    Γɺͦͷଞҟৗݕ஌΍ϨίϝϯυͳͲͰ΋࢖༻Ͱ͖ΔػೳΛఏڙ͍ͯ͠·͢ɻ

    View full-size slide

  23. 1FSDPMBUPSͱ͸ʁ
    w ҟৗͳϩάͷݕ஌
    w ҟৗͳϩάͷৼΓ෼͚
    w Ϣʔβʔෆద੾౤ߘͷݕ஌
    w Ϣʔβʔෆద੾౤ߘͷৼΓ෼͚
    w ֘౰঎඼ͷೖՙ͓஌Βͤ
    w ֘౰঎඼ͷࡏݿ੾Ε͓஌Βͤ
    w ֘౰঎඼ͷ஋Լ͓͛஌Βͤ
    w ඇఆܕίϯςϯπͷΧςΰϥΠζ
    w ˞ΞΠσΟΞ࣍ୈͰ͍Ζ͍Ζʜɻ
    ࣄલʹݕࡧ৚݅ΛΠϯσοΫεԽ͓͖ͯ͠ɺυΩϡϝϯτͷ಺༰ʹϚον͢Δݕࡧ৚݅Λݕࡧ͢Δͨ
    ΊͷػೳͰ͢ɻʢ˞௨ৗͷݕࡧͱ͸ਖ਼൓ରͷ͜ͱΛ͠·͢ɻʣ
    !
    '
    " ' !
    ' " !
    ' !
    ௨ৗͷݕࡧ 1FSDPMBUPS
    74

    View full-size slide

  24. ϓϥάΠϯͷछྨ
    w "OBMZTJT1MVHJO
    w ओʹಛघͳݴޠղੳॲཧͳͲΛఏڙ͢ΔϓϥάΠϯ
    w %JTDPWFSZ1MVHJO
    w ओʹΫϥ΢υ؀ڥ্ͷϊʔυͷൃݟΛఏڙ͢ΔϓϥάΠϯ
    w 3JWFS1MVHJO
    w ओʹଞͷσʔλεΞ͔ΒͷσʔλͷऔΓࠐΈͳͲΛఏڙ͢ΔϓϥάΠϯ
    w 5SBOTQPSU1MVHJO
    w ଞͷϓϩτίϧͰ3&45ΠϯλʔϑΣʔεͷૢ࡞Λఏڙ͢ΔϓϥάΠϯ
    w 4DSJQUJOH1MVHJO
    w ೚ҙͷϓϩάϥϛϯάݴޠʹΑΔεΫϦϓτͷ࣮ߦΛՄೳʹ͢Δϓϥά
    Πϯ
    w 4JUF1MVHJO
    w ؅ཧπʔϧͳͲ6*Λఏڙ͢ΔϓϥάΠϯ
    w 4OBQTIPU3FTUPSFSFQPTJUPSZQMVHJO
    w εφοϓγϣοτ΍ϦετΞΛఏڙ͢ΔϓϥάΠϯ
    w .JTD1MVHJO
    w ͦͷଞ͍Ζ͍Ζ
    &MBTUJDTFBSDI͸ϓϥάΠϯΛ࢖༻ͯ͠ػೳ֦ுՄೳͳ࢓૊Έʹͳ͍ͬͯ·͢ɻϓϥάΠϯͷछྨ͸
    େ͖̔ͭ͘ʹ෼ྨ͞ΕɺඞཁͳϓϥάΠϯΛΠϯετʔϧͯ͠࢖༻͢Δ͜ͱ͕ՄೳͰ͢ɻ
    IUUQXXXFMBTUJDTFBSDIPSHHVJEFFOFMBTUJDTFBSDISFGFSFODFDVSSFOUNPEVMFTQMVHJOTIUNMLOPXOQMVHJOT

    View full-size slide

  25. ϩάऩूϛυϧ΢ΣΞ

    View full-size slide

  26. ϩάऩूϛυϧ΢ΣΞ
    qVFOUE
    MPHTUBTI
    PS
    syslog
    Apache/Nginx logs
    Mobile/Web app logs
    etc.
    &MBTUJDTFBSDI
    " "
    ೔ຊͰਓؾ
    &MBTUJDTFBSDIࣾ੡
    ˞ͦͷଞ"QBDIF'MVNFͱ͍͏ͷ΋͋Γ·͢

    View full-size slide

  27. ,JCBOBͱ͸ʁ
    w &MBTUJDTFBSDI͔ࣾΒఏڙ͞Ε͍ͯΔɺ
    ΠϯσοΫεσʔλΛՄࢹԽ͢ΔͨΊͷ
    πʔϧͰ͢ɻ
    w ϓϩάϥϛϯάϨε
    w ϦΞϧλΠϜ෼ੳ
    w ߴ͍֦ுੑ
    w Φʔϓϯιʔε
    w ,JCBOBͰ͸ɺ"HHSFHBUJPOʹରԠͯ͠
    ΑΓෳࡶͳ෼ੳ͕Մೳʹͳ͍ͬͯ·͢ɻ
    ˔˔˔
    &MBTUJDTFBSDI-PHTUBTI,JCBOB&-,4UBDL

    View full-size slide

  28. ࠷ޙʹͪΐͬͱએ఻

    View full-size slide

  29. 4JCBʢγʔόʣ
    φϨοδϫʔΫε͕ఏڙ͢Δ&MBTUJDTFBSDIϕʔεͷݕࡧ"41αʔϏεͰ͢ɻ
    αʔόʔͷ४උ΍ӡ༻Λؾʹͤͣʹ͙͢ʹ&MBTUJDTFBSDIΛར༻։࢝Ͱ͖·͢ɻ
    ·ͨɺ8FCΫϩʔϥʔ΍ը૾ݕࡧ༻ͷϓϥάΠϯ΋ඪ४૷උɻ
    IUUQTJCBUPLZP
    )FMMP&MBTUJDTFBSDI
    φϨοδϫʔΫε͕ఏڙ͢Δ&MBTUJDTFBSDIʹؔ͢Δٕज़৘ใϒϩάͰ͢ɻ
    ͝ҙݟ͝ײ૝͸!·Ͱ͓ؾܰʹͲ͏ͧʂ
    IUUQTNFEJVNDPNIFMMPFMBTUJDTFBSDI

    View full-size slide

  30. ͝੩ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠

    View full-size slide