Timelion

General overview of the Elastic Stack with a demo where we take a look at Timelion in particular.

Transcript

1. Elastic Stack Timelion Philipp Krenn
   
   
   
   
   @xeraa
2. ViennaDB
3. Infrastructure | Developer Advocate
4. You know, for search
7. ELK Stack
8. Logstash input syslog, stdin, file, TCP, UDP, Unix Sockets, SNMP,... Twitter, Meetup, GitHub, Drupal,...
9. Logstash filter filter { if [type] == "syslog" { grok { match => { "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" } add_field => [ "received_at", "%{@timestamp}" ] add_field => [ "received_from", "%{host}" ] } syslog_pri { } date { match => [ "syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ] } } }
13. Elastic Stack
16. Demo https://github.com/xeraa/vagrant-elastic-stack
17. Conclusion
20. Timelion updates Rashid Khan https://twitter.com/rashidkpc
21. Give it a try https://github.com/xeraa/vagrant-elastic-stack
22. Thanks! Questions? Philipp Krenn
    
    
    
    
    @xeraa PS: Sticker