Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction
- General overview of the Elastic Stack (ELK)
ELK Stack Architecture and Review of Existing Environment
- Assessment of the current Altor CB architecture
- ELK architecture components: Elasticsearch, Logstash, Kibana, and Beats
- Distinguishing between Ingest nodes and Logstash
- Scalability and performance considerations for on-premise installations
- Administration best practices
Beats – Distributed Monitoring
- Configuration and utilization of Filebeat, Auditbeat, Winlogbeat, and Packetbeat
- Secure data shipping via SSL
- Comparing preconfigured modules with custom inputs
- Integration with Logstash and Ingest Pipelines
Parsing and Ingesting Logs from Applications and Databases
- Ingesting custom logs from application sources
- Utilizing Logstash for data parsing and transformation
- Application of filters: grok, dissect, kv, mutate, and date
- Establishing database connections (Oracle, PostgreSQL, SQL Server) via the JDBC input plugin
- Practical scenarios: error logs, audit trails, traces, and slow queries
Advanced Search and Regular Expressions
- Advanced search syntax in Kibana
- Application of regular expressions (regex)
- Implementing filters and OR/AND combinations
- Handling nested fields and arrays
- Saving reusable queries and filters
Custom Dashboards and Visualizations in Kibana
- Visualization types: bar charts, line graphs, maps, and tables
- Working with aggregations and metrics
- Implementing dynamic filters, controls, and drill-down features
- Dashboard sharing capabilities
- Practical exercises: creating dashboards from database and system logs
Alerts and Email Notifications
- Introduction to Watcher and alternatives such as ElastAlert and Kibana Alerts
- Designing custom conditions and triggers
- Configuring email output
- Practical exercise: sending alerts when critical events are detected in Windows or database logs
User and Permission Management
- Overview of X-Pack and available free options
- Creating users and roles
- Access control by index, dashboard, and query
- Practical exercise: defining roles for audit and operations teams
Elasticsearch REST API
- Foundations of the Elasticsearch RESTful API
- Executing GET and POST queries
- Manual and automated indexing processes
- Utilizing tools like curl and Postman
- Practical exercises: searching, inserting, deleting, and updating documents
Requirements
- A solid understanding of the fundamental ELK Stack architecture and its components
- Practical experience with ingesting and visualizing logs using Kibana and Logstash
- Familiarity with the Linux command line and basic scripting
Target Audience
- System administrators
- Infrastructure engineers
- Technical teams seeking advanced capabilities in log centralization
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 4800 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
The content is very helpful, and the trainer makes it more easier to understand
Ibrahim Al mayahi - Vastech SA
Course - Advanced Elasticsearch and Kibana Administration
the profesionalism of the trainer; the way he tried to respond to all the questions; the review questions we had to ask: engaging us in conversations
