OSDC 2014: Jordan Sissel - Find Happiness in your Logs

Post on 06-May-2015

396 views 0 download

description

Got logs? With so much technology powering your business, you need tools to help you identify problems and analyze past behavior. Apache 2.0-licensed Elasticsearch ELK stack is here to help you process, store, and visualize any kind of logging data, in real time, from any source imaginable! Log management seems so boring. Log rotation, retention policy, grep, yuck! What are your servers are doing? Did last night's upgrade break anything? How your users are interacting with your products? Why did the site go down last weekend? Get ready to turn your log pains into awesome visual insights and more! BAM! Elasticsearch ELK! ELK stands for Elasticsearch, Logstash, and Kibana. Each of these three are lovely, open source projects that, together, give you and your business log management superpowers. This talk will primarily be done in three parts: open source and community, technology, and use cases. * The first part will introduce each project and its success as open source software, most notably through supportive and open communities. * The second part will discuss the each project and the problems solved. * The third (and most exciting!) part will highlight a variety of use cases and problem that real humans are using Elasticsearch ELK to solve. Live demos of some use cases will be provided. Attendees will leave the presentation totally full of excitement about this toolset and bursting with fresh ideas about how to tackle their sour logging problems.

Transcript of OSDC 2014: Jordan Sissel - Find Happiness in your Logs

Logstashfind happiness in your logs

with Elasticsearch ELK

Open Source

Apache 2.0 License

Open Source

Open and Friendly Community

Open Source

If a new user has a bad time, it’s a bug.

Open Source

Technology

Logstash

Processing & Transport

Logstash

Logstash

FiltersInputs Outputs42 51 54

Processing & Transport

Logstash Processing & Transport

LAMP Example

ApacheMysqlPHP

Syslog

NagiosElasticsearch

Graphite

IRC

Parse: Latency, Bandwidth, and Errors

Load Balancer

Logstash Example Inputs

Files Graphite

SNMPEmail

Syslog

TwitterTCP

RabbitMQ

Logstash Example Filters

Grok Date

FingerprintGeoIPMultiline

User AgentKey-Value

Logstash Example Outputs

Elasticsearch Graphite

XMPPNagios

Email PagerdutyS3

Elasticsearch

Near Real-Time Search & Analysis

Elasticsearch

Scalable

Elasticsearch

REST + JSON API

Elasticsearch

Kibana

Visualization & Exploration

Kibana

Use Cases

Share Logs with Your Tech Support Team

Use Cases

Graph all things!

Use Cases

Exploration by Non-Technical Users

Use Cases

Troubleshooting Latency

?Late

ncy

Time

X

Movie Releases Demo

Use Cases

Apache Logs Demo

Use Cases