3. DOCUMENT TITLE | DATE
ELK
Advantages of Elasticsearch
BUILT ON TOP OF LUCENE – Being built on top of Lucene, it offers the most powerful full-text
search capabilities.
DOCUMENT-ORIENTED – It stores complex entities as structured JSON documents and indexes all
fields by default, providing a higher performance.
SCHEMA FREE – It stores a large quantity of semi-structured (JSON) data in a distributed fashion. It
also attempts to detect the data structure, index the data present and makes it search-friendly.
FULL TEXT SEARCH – Elasticsearch performs linguistic searches against documents and returns
the documents that matches the search condition.
RESTFUL API – Elasticsearch supports REST API which is light-weight protocol. We can query
Elasticsearch using the REST API with Chrome plug-in Sense. Sense provides a simple user
interface. Sense plugin has features like autocomplete Elasticsearch query syntax, copying the query
as cURL command.
4. DOCUMENT TITLE | DATE
INDEXING
• Character filter
• Tokenizer
• Token Filter
9. DOCUMENT TITLE | DATE
https://www.elastic.co/products/logstash
Logstash
Centralize, Transform & Stash Your Data
10. DOCUMENT TITLE | DATE
A Kibana dashboard displays a collection of visualizations and searches. You can arrange,
resize, and edit the dashboard content and then save the dashboard so you can share it.
Kibana
11. DOCUMENT TITLE | DATE
X-PACK
• Access control
• Data Integrity
• Audit trails
