Visualizing Logs Using ElasticSearch, Logstash and Kibana

[@alexandergonchiy1298]

The "stages" overview in the beginning of the video was a really great aid in helping understand the topic, thanks!

[@dubey_ji]

I think you're sort of an engineer yourself

[@davesteel7513]

I used to do this same thing with $250K of hardware and hundreds of thousands of dollars of software licenses. We've come a long way! Thanks for the great presentation.

[@rpesciotta]

Great intro video, even 4 years later! Congrats, helps a lot.

[@KOBYMOLCHO]

The most elegant Tutorial i've came across, amazing open-source orchestration. Thanks!

[@allansene2406]

Man, what a awesome presentation! Very well planned! Thx very much!

[@veena-4334]

Awesome presentation .Very well defined and explained content on ELK .Thank you very much Jeff.

[@borg286]

the docker-elk image is good for testing, but you need something like kubernetes and split out the processes into their own yaml files. this way each component can be scaled independently, can form clusters, and attached onto jobs the user is running.

[@robertj5888]

Damn! This looks super well put together! Bookmarking this for later.

[@ivoivanov4467]

I am completely mind blown from all this.

[@sgn4525]

Great tutorial. Simple and to the point. Thanks very much.

[@danieldodsonuk]

At 5:00 in you suggest that you need to connect to each machine to get the auth logs. There are syslog variants that can be configured to log remotely so it wouldn't be nearly as horrible as you're suggesting there. I note that you do mention this much later in the video.

[@Eskimoz]

Toute l'équipe Eskimoz vous félicite pour cette belle vidéo :)

[@nuxthrou]

very well presentation and pretty comprehensive. Good Job man!

[@borkityborkbork]

This is a great presentation - thanks for sharing.

[@MatiasBastos]

Who the fck gives thumbs down to a great video that teach you a lot of stuff for free!?!?!?!?!

[@apexyu164]

wow thanks this is 8 year content before and now its in 2022

[@nathanzugsay9373]

Awesome video! Very helpful.

[@kambizshahri1504]

Thanks Jeff. Very well done.

[@reynaldriviere2028]

Thanks jeff, great presentation.

[@VenkatapathiRajuMandapati]

Good one. Been waiting to know the ELK stack from a very long time.

[@youalex1983]

Great presentation, thanks a lot for sharing!

[@manushetty5635]

Very well done presentation ...

[@chris2ferUtoob]

Thanks! Best ELK video i have found. Great job presenting info.

[@nacs]

Great presentation. Thanks

[@jorgemun]

Awesome nice explanations

[@SOTGPhilly]

Thanks for the video. Great information

[@Irmoktran]

Really nice and useful presentation. If possible re-upload the file with a better audio quality.

[@stevenalex9439]

Thank you for your presentation

[@sontranngoc]

Thank you for your informative video!

[@ITSecurityLabs]

I found a new way to visualize logs in grafana. Its way better and easier to setup.

[@VincentStoessel]

Love the PSA!

[@Ichinin]

Oh yeah, pie and bar charts. Really inventive.

[@pantatzz]

You're awesome sir, thanks for the share

[@ramkchirra]

Awesome stuff !!

[@fourten0410]

Great information, thank you!

[@adrianmejia86]

Where can I find the source code of the demo?

[@tonyjaeger8778]

Sorry for the ignorance, what is the program that allows you to view all these "Currently Open Documents".

[@denisjannot]

Thanks Jeff, I like your video, but there's an issue with your docker image. Automated builds are failing since April. Could you please check what's wrong ?

[@danielmd3000]

It would be nice if only I could ear what you are saying... can you reupload this with remastered audio?

[@IcarianVX]

Have to agree with this. Looks like it's a really good presentation, but the sound is way too low.

[@ibrahimsharafelden9667]

Use headphones, It will help.

[@Sammmirrr]

Headphones are good thing to have when you watching this videos

[@BelowAverageRazzleDazzle]

Brevity man. Brevity. This video could have been half as long as it was.

[@jeffswitzer1448]

So could your comment.

[@YoussefAly]

Very impressive ! Thanks for the wonderful video . Could you please share the code with us ?

[@mchajakanhna]

I'm wondering who's the guy who wrote the apache log parsing regex ! it looks scary !

[@TheVictoryChurch]

Timestamp?

[@rashadfarajullayev6703]

Yeah, really cool and horribly complex pattern

[@bernardlowe5433]

@@TheVictoryChurch 2 years too late, but 4:03

[@bierviltbever]

Really useful! thanks

[@AnthoBasc]

very nice presentation

[@AnthoBasc]

Demo at 24:40

[@jadecox4956]

Great video. Is there a way to add speedometers into Kibana?

[@ScottBeeson]

I just have one log source that I want to visualize and monitor. Do I still need ElasticSearch or can I use LogStash directly with Kabana?

[@nicoladellino8124]

Nice video

[@halilkarakose6402]

Thanks for the video. Where can I get the presentation file?

[@Quarantain]

Worthwhile content. Too bad the audio quality leaves a lot to be desired.

[@vijaypalmanit]

sound is very low

[@baharudinyusuf6254]

may i see the script from dashboard.json in order to display the visualization automatically? I also want to display the visualization automatically.thank you

[@vipendrasingh5552]

Which software have you used to make this ppt?

[@netrunnercl]

pretty nice.

[@ScottBeeson]

Is there a GUI for creating the logstash.conf file and filters?

[@SplunkTalks]

it is not audible clearly.. can you raise your volume little bit next time.?

[@MegaIsmael1980]

Thanks jeff

[@cenubit]

Or is available VM appliance(HyperV) for download?

[@shreenaveen]

can i read SAS logs with this stack?

[@user-bi6tg4gb9j]

very nice ！！

[@marianterinte8037]

dude thanks!

[@mikyrospetto]

Hi Jeff, very good video, What software did you use for presentation?

[@AdamPrato]

looks like prezi -- prezi.com/

[@LauritsSogaardNielsen]

Adam Prato I think its bartaz.github.io/impress.js/#/bored Impress.js

[@hiteshvevo]

do u have any git project on how to filter using grok, can anyone pls share or tell how to filter using grok

[@sivakannan23]

Thanks

[@jemlifathi]

hello, can you tell how did you made your presentation please? thanks.

[@flojo2573]

+Jemli Fathi impress.github.io/impress.js/

[@jemlifathi]

thanks a lot man

[@amritgrewal8071]

+Jemli Fathi Use Prezi instead. This seems like too much work

[@eXpire163]

Stupid question, what software did u use to make the presentation?

[@faisalu007]

prezi.com

[@necmttn]

impress.js

[@gregorbruhin28]

I would say it looks like strut: strut.io/editor/index.html

[@necmttn]

it's also uses impress.js :D

[@ecuhack8689]

eXpire 163 o

[@umahmuslimah]

Is anyone here know how to automaticly send data log from websiy into elasticsearch?

[@sbahal1]

Good content, but very bad audio- I have my speakers to max/max - still can barely hear.

[@mgarde]

Although most people that watch this video probably know that 1:58 is a reference to xkcd.com/1179, the author of the video should know how to cite properly.

[@DrRobrez]

there are two types of people in the world... those was say "regular" and those who say "redgular". what is a "red jex?"

[@souravsarkar7193]

It's regex which basically means regular expression.

[@kkbevin3351]

volume is too low...

[@flaviopegas]

I had to put it on 1.5 speed, otherwise, I would die...

[@scottbossi1275]

test2

[@BloodyIron]

Stopped watching because I can't hear you!!! Seriously, test your audio before uploading please!!!

[@scottbossi1275]

test

[@nairit84]

Отстой твой доклад!