Observability
Logstash: managing plugins and adopting Elastic Common Schema (ECS)
Written version of the video lessons: list, install, update and bundle Logstash plugins offline; understand ECS, ecs_compatibility mode and naming your fi…
Guides & insights
A library for curious minds
Observability
Transforms and enrich: summarising and enriching data in Elasticsearch
Build entity-centric indices with pivot and latest transforms, and enrich documents at ingest time with enrich policies, or at query time with ES|QL.
Observability
Machine learning in Elastic: anomaly detection and AIOps
Automatically detect abnormal behaviour: anomaly detection jobs, datafeeds, detectors, influencers, alerts, forecasts, log analysis (AIOps) and data frame…
Observability
Elastic Security: SIEM, detection rules and investigation
Use Elastic Security as a SIEM: ECS data sources, detection rule types (query, EQL, ES|QL, threshold, indicator match, machine learning), prebuilt rules, …
Observability
Elastic path project: centralising and using logs
The validation project of the "Elastic Stack mastery" path: Elastic Agent and Fleet, Logstash, Elasticsearch (data streams, ILM), Kibana (ES|QL, Lens, ale…
Observability
OpenTelemetry and Elasticsearch: compatibility and architecture
Send OpenTelemetry to Elasticsearch: Collector and elasticsearch exporter, managed OTLP endpoint, APM Server, EDOT distribution, native OTel or ECS storag…
Observability
Ingesting OpenTelemetry logs into Elasticsearch
Collect and structure logs with the OpenTelemetry Collector (filelog receiver, operators, transform processor, k8sattributes), ship them to Elasticsearch …
Observability
OpenTelemetry traces in Elasticsearch and Kibana APM
Instrument applications with OpenTelemetry or EDOT SDKs, send traces to Elasticsearch, get Kibana APM views, sample, and link traces and logs.
Observability
OpenTelemetry metrics in Elasticsearch
Collect host, Kubernetes and application metrics with OpenTelemetry, understand temporality and types, store them in time series data streams and query th…
Observability
Elastic Agent: architecture, Fleet and integrations
Understand Elastic Agent: single collection agent, Fleet and Fleet Server, agent policies, integrations, data streams, outputs, and managed versus standal…
Observability
Elastic Agent or Beats? Choosing and migrating
Compare Elastic Agent and Beats (Filebeat, Metricbeat, Winlogbeat), know when to keep Beats, and migrate step by step without losing data.
Observability
Installing Fleet Server and enrolling Elastic Agents
Set up Fleet Server, create a policy, enroll Linux, Windows and Docker agents, understand tokens and certificates, and install in standalone mode.
Learning never stops