1. ELK basics
1. Introduction to ELK
ELK is essentially a combination of three softwares. Through the combination of these three softwares, a platform for log collection, analysis, and display can be built. That is to say, with the help of ELK, the collected log information can be converted into pie charts and columns. Display in intuitive ways such as graphs and graphs.
The three components of ELK are as follows:
- kibana: This component is used to display data, when the user visits it is to access kibana
- Elaticsearch referred to as es: used to store data, the data displayed in kibana are all from es
- logsatsh: used to collect data on various services in the network, and store the collected data in es