Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing...
Transcript of Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing...
![Page 1: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/1.jpg)
Tidsserier i ELKOlav Kvittem
UNINETT
11.05.2017
![Page 2: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/2.jpg)
ELK
●Elasticsearch
–Database, indeksering, aggregering, søk - API
●Logstash
–Mater Elasticsearch
●Kibana
–Viser fram data fra Elasticsearch og Graphite ...
![Page 3: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/3.jpg)
![Page 4: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/4.jpg)
![Page 5: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/5.jpg)
![Page 6: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/6.jpg)
![Page 7: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/7.jpg)
Timelion ’sum loss dragonlab’
es(q=*,index=dragonlab,
metric='sum:tloss',
kibana=true,
timefield=@date)
.divide(1000).divide(60)
.bars().label('Sum down(min)')
![Page 8: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/8.jpg)
Timelion - ’dragonlab hdlay/time’
.es(q='*',index=dragonlab,type=mp-rude,timefield=@date,kibana=true,
metric=avg:h_ddelay,
metric=min:h_ddelay,
metric=max:h_ddelay)
.mvavg(50)
.points(weight=2, radius=1)
![Page 9: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/9.jpg)
![Page 10: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/10.jpg)
Kibana + Timelion oppsummert
●Kibana kan
–lage enkle diagram + percentiler
–Kan kategorisere og oppsummere
–Fri-tekst-søk mot Elasticsearch
–Dashboard for å sette sammen visualiseringer og søk
–God tidsnavigering
●Timelion
–Var en plugin i v4 – integrert i v5
–Spesialisert på tidsserier
–Kan gjøre mer komplekse operasjoner på data
–Kan kominere data fra flere kilder i samme figur
●Begge - Utvidbare – pluginbaserte
![Page 11: Tidsserier i ELK - Uninett · Elasticsearch CPU 04:00 Time range From: now-24h now Refreshing every: IOS 08:00 Apply 16:00 16:00 < zoom out > O Last 24 hours Refresh every IOS](https://reader034.fdocuments.us/reader034/viewer/2022043019/5f3b00b406c79f2a131c01b4/html5/thumbnails/11.jpg)