Using Logstash for Alfresco Audit reporting

1,712 views

Published on

Using Logstash for Alfresco Audit reporting

Published in: Technology, Business
0 Comments
2 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
1,712
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
3
Comments
0
Likes
2
Embeds 0
No embeds

No notes for slide

Using Logstash for Alfresco Audit reporting

  1. 1. Implementing a Log monitoring tool Duminda Ekanayake (dekanayake@zaizi.com)
  2. 2. Why it is important • Enterprise systems produce large , different log files. • When you have lot of logs it is very difficult to trace an issue or incident . • Using log files it is possible to alert users when a critical issue is occurred.
  3. 3. Features of a good log monitoring tool • Providing a centralized server , where log from nodes are possible to upload • Ability to search specific terms in logs. • Produce alerts on specific log event, ex : when log priority is “ERROR”.
  4. 4. Approach
  5. 5. Approach • • • • Log4j Logstash Elastic search Kibana
  6. 6. Approach
  7. 7. Log4j • Add a SocketAppender named LOGSTASH to the applications lo4j.xml file <appender name="LOGSTASH" class="org.apache.log4j.net.SocketAppender"> <param name="RemoteHost" value="your_logstash_host_address" /> <param name="ReconnectionDelay" value="60000" /> <param name="Threshold" value="DEBUG" /> </appender>
  8. 8. Logstash • Logstash will collect logs , parse them , and store them for later use (like , searching). input { log4j { type => "log4j-type" port => 4560 } } output { elasticsearch { host => localhost port => 9300 cluster => elasticsearch } }
  9. 9. Elastic search • Elastic search is used to store and index logs. • Elastic search – – – – Build on top Lucene Schema free Store as structured JSON documents Real time data and analytics
  10. 10. Kibana • Kibana will be use to search the logs • Using Kibana, user’s can – Search the logs – Visually analyze trends in log vloume to find peaks and valleys – Score, trend and average fields to find patterns – Providning RS feed and get updates at any interval
  11. 11. SEARCH
  12. 12. COLUMNIZE
  13. 13. GRAPH
  14. 14. SCORE , TRENDS

×