Slide 1
Slide 1 text
Suite ELK
au service des développeurs et de la production
Slide 2
Slide 2 text
observer, mesurer, améliorer
Icons by Alexander Skowalsky, Shawn Schmidt and Andreas Bjurenborg from the Noun Project
Slide 3
Slide 3 text
logiciels libres
au service de l’entreprise
Slide 4
Slide 4 text
metrics
Slide 5
Slide 5 text
metrics
métier
Slide 6
Slide 6 text
metrics
• utilisateurs connectés
• nombre de commandes
• panier moyen
• état du stock
métier
Slide 7
Slide 7 text
metrics
• utilisateurs connectés
• nombre de commandes
• panier moyen
• état du stock
métier système
Slide 8
Slide 8 text
metrics
• utilisateurs connectés
• nombre de commandes
• panier moyen
• état du stock
• temps de chargement
• taux d’échec
• réponse de la BDD
• disponibilité des services
métier système
Slide 9
Slide 9 text
sources hétérogènes
Slide 10
Slide 10 text
sources hétérogènes
Slide 11
Slide 11 text
sources hétérogènes
Slide 12
Slide 12 text
sources hétérogènes
Slide 13
Slide 13 text
sources hétérogènes
Slide 14
Slide 14 text
sources hétérogènes
Slide 15
Slide 15 text
étude de cas
Slide 16
Slide 16 text
xeonys-fr-01
HAProxy
Apache/FPM A1
Apache/FPM A2
BDD-A Queues
Varnish
Apache/FPM B1
Apache/FPM B2
BDD-B Queues
Apache/FPM B3
xeonys-uk
HAProxy
Varnish
Apache/FPM 1
Apache/FPM 2
BDD Queues
xeonys-de
HAProxy
Varnish
Apache/FPM 1
Apache/FPM 2
BDD Queues
Apache/FPM 3
Slide 17
Slide 17 text
Icon by Chameleon Design from the Noun Project
Slide 18
Slide 18 text
Icon by Chameleon Design from the Noun Project
Slide 19
Slide 19 text
Icon by Chameleon Design from the Noun Project
indicateurs imprécis
Slide 20
Slide 20 text
Icon by Chameleon Design from the Noun Project
indicateurs imprécis
Slide 21
Slide 21 text
Icon by Chameleon Design from the Noun Project
indicateurs imprécis logs éparpillés
Slide 22
Slide 22 text
Icons by Chameleon Design, il Capitano, Shmidt Sergey and Kirby Wu from the Noun Project
Slide 23
Slide 23 text
Icons by Chameleon Design, il Capitano, Shmidt Sergey and Kirby Wu from the Noun Project
Slide 24
Slide 24 text
Icons by Chameleon Design, il Capitano, Shmidt Sergey and Kirby Wu from the Noun Project
Slide 25
Slide 25 text
Icons by Chameleon Design, il Capitano, Shmidt Sergey and Kirby Wu from the Noun Project
Slide 26
Slide 26 text
ELK
Icons by Chameleon Design, il Capitano, Shmidt Sergey and Kirby Wu from the Noun Project
Slide 27
Slide 27 text
ELK
Slide 28
Slide 28 text
ELK
Elasticsearch
Slide 29
Slide 29 text
ELK
Elasticsearch • Logstash
Slide 30
Slide 30 text
ELK
Elasticsearch • Logstash • Kibana
Slide 31
Slide 31 text
Logstash
Slide 32
Slide 32 text
Logstash
Extract Transform Load
Slide 33
Slide 33 text
Logstash
Extract Transform Load
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
Slide 34
Slide 34 text
Logstash
Extract Transform Load
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
filters:
grok:
pattern: httpd
date:
match: dd-MMM-YYYY HH:mm:ss
mutate:
convert: [line: integer]
geoip:
src: remote_ip
target: geo
Slide 35
Slide 35 text
Logstash
Extract Transform Load
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
filters:
grok:
pattern: httpd
date:
match: dd-MMM-YYYY HH:mm:ss
mutate:
convert: [line: integer]
geoip:
src: remote_ip
target: geo
outputs:
elasticsearch:
host: 127.0.0.1:9200
index: logs-%{type}-%{+YYYY.MM.dd}
stdout:
codec: rubydebug
Slide 36
Slide 36 text
Elasticsearch
la base de donnée au cœur de tout
Slide 37
Slide 37 text
Elasticsearch
Slide 38
Slide 38 text
Elasticsearch
Performance
Slide 39
Slide 39 text
Elasticsearch
Performance
Interface REST/HTTP
Slide 40
Slide 40 text
Elasticsearch
Performance
Interface REST/HTTP
Syntaxe JSON
Slide 41
Slide 41 text
Elasticsearch
Performance
Interface REST/HTTP
Syntaxe JSON
Cluster natif
Slide 42
Slide 42 text
Elasticsearch
Performance
Interface REST/HTTP
Syntaxe JSON
Cluster natif
Simple et souple
Slide 43
Slide 43 text
Elasticsearch
indexation de documents
Icons by Chameleon Design and Shmidt Sergey from the Noun Project
Slide 44
Slide 44 text
Elasticsearch
indexation de documents
Icons by Chameleon Design and Shmidt Sergey from the Noun Project
Slide 45
Slide 45 text
Elasticsearch
indexation de documents
Icons by Chameleon Design and Shmidt Sergey from the Noun Project
Slide 46
Slide 46 text
index
Icon by Shmidt Sergey from the Noun Project
Slide 47
Slide 47 text
logs-http
Icon by Shmidt Sergey from the Noun Project
Slide 48
Slide 48 text
logs-http-{YMD}
Icon by Shmidt Sergey from the Noun Project
Slide 49
Slide 49 text
logs-http-{YMD}
2016.10.10
Icon by Shmidt Sergey from the Noun Project
Slide 50
Slide 50 text
logs-http-{YMD}
2016.10.11
2016.10.10
Icon by Shmidt Sergey from the Noun Project
Slide 51
Slide 51 text
logs-http-{YMD}
2016.10.12
2016.10.11
2016.10.10
Icon by Shmidt Sergey from the Noun Project
Slide 52
Slide 52 text
logs-http-{YMD}
2016.10.13
2016.10.12
2016.10.11
2016.10.10
Icon by Shmidt Sergey from the Noun Project
Slide 53
Slide 53 text
logs-http-{YMD}
2016.10.14
2016.10.13
2016.10.12
2016.10.11
2016.10.10
Icon by Shmidt Sergey from the Noun Project
Slide 54
Slide 54 text
logs-http-{YMD}
2016.10.14
2016.10.13
2016.10.12
2016.10.11
2016.10.10
2015.08.02
Icon by Shmidt Sergey from the Noun Project
Slide 55
Slide 55 text
logs-http-{YMD}
2016.10.14
2016.10.13
2016.10.12
2016.10.11
2016.10.10
2015.08.02
❌
Icon by Shmidt Sergey from the Noun Project
Slide 56
Slide 56 text
logs-http-{YMD}
2016.10.14
2016.10.13
2016.10.12
2016.10.11
2016.10.10
2015.08.02
recherche ciblée : j-2
❌
{
Icon by Shmidt Sergey from the Noun Project
Slide 57
Slide 57 text
administration facile
Slide 58
Slide 58 text
administration facile
paquets à installer
Slide 59
Slide 59 text
administration facile
paquets à installer
très peu de config de départ
Slide 60
Slide 60 text
administration facile
paquets à installer
très peu de config de départ
cluster trivial
Slide 61
Slide 61 text
administration facile
paquets à installer
très peu de config de départ
cluster trivial
sauvegardes par snapshot
Slide 62
Slide 62 text
documents
Slide 63
Slide 63 text
$ curl -XGET 'http://localhost:9200/_search' -d '{
"query": {
"bool" : {
"must" : {
"query_string" : {
"query" : "some query string here"
}
},
"filter" : {
"term" : { "user" : "kimchy" }
}
}
}
}
'
documents
Slide 64
Slide 64 text
$ curl -XGET 'http://localhost:9200/_search' -d '{
"query": {
"bool" : {
"must" : {
"query_string" : {
"query" : "some query string here"
}
},
"filter" : {
"term" : { "user" : "kimchy" }
}
}
}
}
'
documents {
"_shards":{
"total" : 5,
"successful" : 5,
"failed" : 0
},
"hits":{
"total" : 1,
"hits" : [
{
"_index" : "twitter",
"_type" : "tweet",
"_id" : "1",
"_source" : {
"user" : "kimchy",
"postDate" : "2009-11-15T14:12:12",
"message" : "hello Elasticsearch"
}
}
]
}
}
Slide 65
Slide 65 text
agrégations
Slide 66
Slide 66 text
agrégations
GET /cars/transactions/_search
{
"size" : 0,
"aggs": {
"colors": {
"terms": {
"field": "color"
},
"aggs": {
"avg_price": {
"avg": {
"field": "price"
}
}
}
}
}
}
Slide 67
Slide 67 text
agrégations
GET /cars/transactions/_search
{
"size" : 0,
"aggs": {
"colors": {
"terms": {
"field": "color"
},
"aggs": {
"avg_price": {
"avg": {
"field": "price"
}
}
}
}
}
}
{
...
"aggregations": {
"colors": {
"buckets": [
{
"key": "red",
"doc_count": 4,
"avg_price": {
"value": 32500
}
},
{
"key": "blue",
"doc_count": 2,
"avg_price": {
"value": 20000
}
},
{
"key": "green",
"doc_count": 2,
"avg_price": {
"value": 21000
}
}
]
}
}
...
}
Slide 68
Slide 68 text
recherche à facettes
Slide 69
Slide 69 text
recherche à facettes
Slide 70
Slide 70 text
recherche à facettes
Slide 71
Slide 71 text
recherche à facettes
Slide 72
Slide 72 text
recherche à facettes
Slide 73
Slide 73 text
Kibana
Slide 74
Slide 74 text
Kibana
Interface graphique web
Slide 75
Slide 75 text
Kibana
Interface graphique web
Basé sur les agrégations
Slide 76
Slide 76 text
Kibana
Interface graphique web
Basé sur les agrégations
Visualisations
Slide 77
Slide 77 text
Kibana
Interface graphique web
Basé sur les agrégations
Visualisations
Fouille de données
Slide 78
Slide 78 text
Kibana
Slide 79
Slide 79 text
logs HTTP
Slide 80
Slide 80 text
logs HTTP
Slide 81
Slide 81 text
éléments de corrélation
Slide 82
Slide 82 text
éléments de corrélation
HTTP
Slide 83
Slide 83 text
éléments de corrélation
PHP
HTTP
Slide 84
Slide 84 text
éléments de corrélation
PHP
HTTP Proxy
Slide 85
Slide 85 text
éléments de corrélation
Queues
PHP
HTTP Proxy
Slide 86
Slide 86 text
éléments de corrélation
Queues
PHP
HTTP Proxy
date
request
method
referrer
user-agent
host
stack
Slide 87
Slide 87 text
éléments de corrélation
Queues
PHP
HTTP Proxy
date
request
method
referrer
user-agent
host
stack
date
file
line
class
function
message
severity
app_name
app_env
host
stack
Slide 88
Slide 88 text
éléments de corrélation
Queues
PHP
HTTP Proxy
date
request
method
referrer
user-agent
host
stack
date
file
line
class
function
message
severity
app_name
app_env
host
stack
date
request
method
frontend
backend
host
stack
Slide 89
Slide 89 text
éléments de corrélation
Queues
PHP
HTTP Proxy
date
request
method
referrer
user-agent
host
stack
date
file
line
class
function
message
severity
app_name
app_env
host
stack
date
request
method
frontend
backend
host
stack
date
message
severity
app_name
app_env
host
stack
Slide 90
Slide 90 text
index dédiés
• logs-http-access
• logs-http-error
• logs-gelf
• logs-redis
• logs-pgsql
• logs-fpm
Slide 91
Slide 91 text
collecte
Icons by Chameleon Design from the Noun Project
Slide 92
Slide 92 text
collecte
Icons by Chameleon Design from the Noun Project
Slide 93
Slide 93 text
collecte
+ lib/gelf.php
Icons by Chameleon Design from the Noun Project
Slide 94
Slide 94 text
collecte
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
Logstash
+ lib/gelf.php
Icons by Chameleon Design from the Noun Project
Slide 95
Slide 95 text
collecte
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
Logstash
+ lib/gelf.php
Icons by Chameleon Design from the Noun Project
Slide 96
Slide 96 text
collecte
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
Logstash
+ lib/gelf.php
prospectors:
paths: /var/log/*.log
input_type: log
output:
logstash:
hosts: logstash:5044
Filebeat
Icons by Chameleon Design from the Noun Project
Slide 97
Slide 97 text
collecte
inputs:
beats:
port: 5044
gelf:
port: 12201
use_udp: true
Logstash
+ lib/gelf.php
prospectors:
paths: /var/log/*.log
input_type: log
output:
logstash:
hosts: logstash:5044
Filebeat
Icons by Chameleon Design from the Noun Project
Slide 98
Slide 98 text
Beat
Slide 99
Slide 99 text
Beat
framework Go
Slide 100
Slide 100 text
Beat
framework Go
Filebeat
Slide 101
Slide 101 text
Beat
framework Go
Filebeat
Metricbeat
Slide 102
Slide 102 text
Beat
framework Go
Filebeat
Metricbeat
Packetbeat
Slide 103
Slide 103 text
et les données métier ?
Slide 104
Slide 104 text
2 profils d’utilisation
Slide 105
Slide 105 text
2 profils d’utilisation
au moins
Slide 106
Slide 106 text
2 profils d’utilisation
au moins
chercher des causes
Slide 107
Slide 107 text
2 profils d’utilisation
au moins
chercher des causes
valider des hypothèses
Slide 108
Slide 108 text
popularité croissante
Slide 109
Slide 109 text
popularité croissante
Hébergement et Infogérance Open Source
Slide 110
Slide 110 text
adopter prudemment
Slide 111
Slide 111 text
adopter prudemment
license
Slide 112
Slide 112 text
adopter prudemment
license
modèle économique
Slide 113
Slide 113 text
adopter prudemment
license
modèle économique
gouvernance du projet
Slide 114
Slide 114 text
adopter prudemment
license
modèle économique
gouvernance du projet
place de la communauté
Slide 115
Slide 115 text
adopter prudemment
license
modèle économique
gouvernance du projet
place de la communauté
✔
Slide 116
Slide 116 text
open-source préservé
Slide 117
Slide 117 text
open-source préservé
gros projets externes pérennisés
Slide 118
Slide 118 text
open-source préservé
gros projets externes pérennisés
fort engagement dans Lucene
Slide 119
Slide 119 text
modèle économique
Slide 120
Slide 120 text
modèle économique
Libre, gratuit
• Elasticsearch
• Logstash
• Kibana
• Beat
• Curator
• …
Slide 121
Slide 121 text
modèle économique
Libre, gratuit
• Elasticsearch
• Logstash
• Kibana
• Beat
• Curator
• …
Services
• formation
• assistance
• consulting
• X-Pack
Slide 122
Slide 122 text
modèle économique
Libre, gratuit
• Elasticsearch
• Logstash
• Kibana
• Beat
• Curator
• …
Services
• formation
• assistance
• consulting
• X-Pack
Cloud
• As A Service
• Hébergé
Slide 123
Slide 123 text
conclusions
Slide 124
Slide 124 text
Hébergement et Infogérance Open Source
Jérémy Lecour
Slide 125
Slide 125 text
forge.evolix.org
www.evolix.fr
@evolix – @jlecour
[email protected]
@
wiki.evolix.org
Git logo from git-scm.org
Chain by Bohdan Burmich from the Noun Project
Paw Print by Mattijs Dekkers from the Noun Project
Twitter logo from twitter.com