Elastic Stack Boot Camp
In today’s world, we have so much data that it’s hard to find what we want. We need a tool that can help us find the needle in that Big Data haystack. The Elastic Stack, more commonly known as the ELK Stack, is a collection of tools to help you search all that data and find what you need.
The Elastic Stack has become the most popular tool for ingesting data that you can later search and visualize. From log analysis to security monitoring, there are many use-cases for ELK.
This Elasticsearch training course is intended for engineers and architects who want to make sense of their machine data and learn how to ingest, search, analyze, and visualize it all using the Elastic Stack. You will start by learning how to install and configure all of the Elastic Stack components—Elasticsearch, Logstash, Kibana, Beats, and X-Pack. Next, you will learn how to collect the data you need with Logstash and Beats and send it into Elasticsearch, the search and analytics engine. By the end of this course, you will learn how to visualize all of this data in Kibana. You will also learn to use X-Pack to notify yourself and your team when problems are found that you can investigate and fix them.
In this Elasticsearch Training, You Will Learn How to:
- Get started with Elastic Stack components
- Perform useful search and analytics queries in Elasticsearch
- Query and aggregate Elasticsearch indexed data with Query DSL
- Perform more complex searches using Kibana with data indexed in Elasticsearch
- Ingest different types of machine data in both Logstash and Beats
- Work with search results to create powerful visualizations with Kibana
- Secure and monitor your Elastic Stack
- Extend your Elastic Stack deployment to a production environment
Duration
3 days/24 hours of instructionPublic Classroom Pricing
$2550(USD)
GSA Price: $2440
Group Rate: $2450
Private Group Pricing
Have a group of 5 or more students? Request special pricing for private group training today.
Part 1: Getting started with Elastic Stack
- What is the Elastic Stack?
- Elastic Stack architecture
- Licensing and costs
- ELK on-prem
- ELK cloud service
- Common deployment scenarios
- Deployment tools examples: Docker and Kubernetes
- A case study from Netflix
Part 2: Getting started with Elasticsearch
- Introduction to Elasticsearch
- Understanding logical Elasticsearch concepts
- Documents
- JSON data structure
- Mappings
- Indices
- Understanding an inverted index
- Understanding the connection between Elasticsearch and Apache Lucene
- Understanding the difference between Elasticsearch and an RDBMS
- Retrieving data from indices and documents
- Using RESTful API
- Using client APIs: Java, .NET, Ruby, and Python
- Using graphing and analytics tools: Kibana and Grafana
- Understanding Elasticsearch architecture for scalability
- Deploying clusters
- Deploying nodes in clusters
- How sharding works
- How replication works
- Exercise: install and configure Elasticsearch to create a cluster and node
- Getting data into Elasticsearch
- Creating an index
- Adding documents to an index
- Indexing many documents
- Getting data out of Elasticsearch
- Using HTTP methods (GET, POST, PUT, UPDATE, DELETE) with curl
- Exercise: create an index and add documents to Elasticsearch with curl
- Exercise: retrieve data from Elasticsearch via your browser and curl
- Basic searches and queries UI tools
- Exercise: install and run Kibana
- Exercise: run basic queries using Kibana Console (Dev Tools)
Part 3: Querying Elasticsearch
- What is Query Domain Specific Language (DSL)?
- DSL query context
- DSL filter context
- Writing and submitting search queries
- Search using Boolean operators
- Search for field terms
- Search within ranges
- Search with wildcards and regular expressions
- Exercise: write and submit queries using Kibana Discover
Part 4: Aggregations in Query DSL
- What are aggregations?
- Different types of aggregations
- Performing bucket and metric aggregations
- Exercise: create metric or bucket aggregations
Part 5: Define how Elasticsearch stores and indexes data with mapping
- What is mapping?
- Understand mapping types
- Field data types and meta-fields
- Dynamic mapping
- Exercise: add mapping to an index
Part 6: Extending Elasticsearch functionality with plugins and integrations
Part 7: Fundamentals of Logstash
- Introduction to Logstash
- Logstash features overview
- Installing Logstash
- Exercise: install and configure Logstash
- Process simple Logstash event
- Exercise: implement a simple Logstash pipeline
- Advanced Logstash pipeline
- Exercise: build Logstash pipeline (with logs or network streams)
- Working with Logstash plugins
- Input plugins
- Output plugins
- Filter plugins
- Codec plugins
- Exercise: writing a Logstash config with input and output plugins
- Exercise: search for Logstash data in Kibana
- Troubleshooting Logstash performance
Part 8: Shipping data with Beats
- Introduction to Beats
- What are the Beats?
- Filebeat
- Packetbeat
- Metricbeat
- Heartbeat
- Auditbeat
- Winlogbeat
- Community Beats
- Installing and configuring Beats
- Commonly used Beats: Filebeat and Metricbeat
- Configure Filebeat to use Elasticsearch
- Exercise: install and configure Filebeat to send logs to Elasticsearch
- Beats vs. Logstash
- Exercise: configure Filebeat to send logs to Logstash; see the difference in Kibana
- Configure Metricbeat to use Logstash
- Exercise: install and configure Metricbeat for system monitoring via Logstash
Part 9: Visualizing data with Kibana
- Additional information about Kibana
- Walkthrough of Kibana UI
- Introducing Kibana Query Language (KQL)
- KQL vs. Lucene query syntax
- Saving and reusing searches
- Exploring Kibana visualizations
- Visualization types
- Exercise: create different types of visualizations
- Introduction to Kibana dashboards
- Exercise: create your own dashboards
Part 10: Extending Elastic deployment to production with X-Pack
- What is X-Pack?
- Security
- Authentication and authorization
- Third-party integration
- Exercise: configure security monitoring
- Monitoring Elastic Stack
- Alerting
- Creating alerts
- Scheduling alerts
- Alert notifications
- Exercise: create an alert
- Reporting
- Exporting Kibana visualization and data
- Creating on-demand reports
- Creating scheduled reports
- Exercise: create on-demand and scheduled reports
- Machine learning
- Anomaly detection
- Capacity planning and forecasting
Part 11: Putting it all together
- Exercise: create and save new searches to visualize in Kibana and add to a new dashboard
- Summary of everything learned
This Elasticsearch training course is intended for engineers and architects who want to make sense of their machine data and learn how to ingest, search, analyze, and visualize it all using the Elastic Stack. Some professions that may find this course particularly useful include:
- Software Developers and Engineers
- Data Architects
- System Administrators
- DevOps Practitioners
- Data/Security Analysts
- Monitoring and Observability Teams