日志收集技术之ELK

亦凉 2024-03-26 15:47 21阅读 0赞

**目录**

ELK基础知识

[什么是ELK![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/editor/129271728][ELK_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129271728]

[ELK的架构和组件![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/editor/129272231][ELK_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129272231]

[ELK的优点和局限性![icon-default.png_t_N176][]https://blog.csdn.net/lonely\_baby/article/details/129272231?spm=1001.2014.3001.5502][ELK_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129272231_spm_1001.2014.3001.5502]

Logstash

[Logstash的安装和配置![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/editor/129272269][Logstash_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129272269]

[ELK的输入、过滤和输出![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/success/129272342][ELK_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_success_129272342]

[Logstash的插件和扩展![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/editor/129279264][Logstash_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129279264]

[Logstash与其它工具的集成![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/editor/129291540][Logstash_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129291540]

Elasticsearch

[ElasticSearch的安装与配置![icon-default.png_t_N176][]https://mp.csdn.net/mp\_blog/creation/editor/129291588][ElasticSearch_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129291588]

[ElasticSearch的索引和搜索![icon-default.png_t_N176][]https://blog.csdn.net/lonely\_baby/article/details/129291778?spm=1001.2014.3001.5502][ElasticSearch_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129291778_spm_1001.2014.3001.5502]

[ElasticSearch的数据模型和映射![icon-default.png_t_N176][]https://blog.csdn.net/lonely\_baby/article/details/129293299?spm=1001.2014.3001.5502][ElasticSearch_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129293299_spm_1001.2014.3001.5502]

[ElasticSearch的分片和副本![icon-default.png?t=N176][icon-default.png_t_N176]https://blog.csdn.net/lonely\_baby/article/details/129298935?spm=1001.2014.3001.5502][ElasticSearch_icon-default.png_t_N176_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129298935_spm_1001.2014.3001.5502]

Kibana

[Kibana的安装和配置![icon-default.png?t=N176][icon-default.png_t_N176]https://blog.csdn.net/lonely\_baby/article/details/129309614?spm=1001.2014.3001.5502][Kibana_icon-default.png_t_N176_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129309614_spm_1001.2014.3001.5502]

[Kibana的可视化和仪表盘![icon-default.png?t=N176][icon-default.png_t_N176]https://blog.csdn.net/lonely\_baby/article/details/129310458?spm=1001.2014.3001.5502][Kibana_icon-default.png_t_N176_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129310458_spm_1001.2014.3001.5502]

Kibana的搜索和过滤

Kibana的高级功能和插件

ELK的应用场景

日志收集和分析

安全事件监测和响应

业务数据分析和可视化

应用性能监测和优化

实践项目

使用ELK搭建日志收集和分析系统

使用ELK进行安全事件监测和响应

使用ELK进行业务数据分析和可视化

使用ELK进行应用性能监测和优化

[icon-default.png_t_N176]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/a24e3ac49ee74f13a4de9141c4cfd3c1.png
[ELK_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129271728]: https://mp.csdn.net/mp_blog/creation/editor/129271728
[ELK_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129272231]: https://mp.csdn.net/mp_blog/creation/editor/129272231
[ELK_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129272231_spm_1001.2014.3001.5502]: https://blog.csdn.net/lonely_baby/article/details/129272231?spm=1001.2014.3001.5502
[Logstash_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129272269]: https://mp.csdn.net/mp_blog/creation/editor/129272269
[ELK_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_success_129272342]: https://mp.csdn.net/mp_blog/creation/success/129272342
[Logstash_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129279264]: https://mp.csdn.net/mp_blog/creation/editor/129279264
[Logstash_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129291540]: https://mp.csdn.net/mp_blog/creation/editor/129291540
[ElasticSearch_icon-default.png_t_N176_https_mp.csdn.net_mp_blog_creation_editor_129291588]: https://mp.csdn.net/mp_blog/creation/editor/129291588
[ElasticSearch_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129291778_spm_1001.2014.3001.5502]: https://blog.csdn.net/lonely_baby/article/details/129291778?spm=1001.2014.3001.5502
[ElasticSearch_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129293299_spm_1001.2014.3001.5502]: https://blog.csdn.net/lonely_baby/article/details/129293299?spm=1001.2014.3001.5502
[ElasticSearch_icon-default.png_t_N176_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129298935_spm_1001.2014.3001.5502]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/c7db69262c49412980408ed94766feed.png
[Kibana_icon-default.png_t_N176_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129309614_spm_1001.2014.3001.5502]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/2ea887f1c7c24f77bb184c3ae6bd4545.png
[Kibana_icon-default.png_t_N176_icon-default.png_t_N176_https_blog.csdn.net_lonely_baby_article_details_129310458_spm_1001.2014.3001.5502]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/9afdc0ce46c84d03b871987f8797d7aa.png