Oracle VM VirtualBox #
We will use VirtualBox to deploy our test VMs. Some labs will be done on Docker, so if you already have a Docker engine, you can use it instead of deploying a new VM.
You must proceed with the VirtualBox installation following the procedure for your system:
https://www.virtualbox.org/wiki/DownloadsHashiCorp Vagrant #
We will use Vagrant to automatically deploy test environments. To learn more about Vagrant, you can follow our dedicated training.
You must proceed with the Vagrant installation following the procedure for your system:
https://developer.hashicorp.com/vagrant/installFrom Concept to Expertise #
We have pre-configured a repo for the training.
Git Repo
You can use the command below to clone the repo:
git clone https://github.com/RousselTM/logstash-formationEnvironment Choice
The test environment configurations are in the tp folder. In this folder, there are several subfolders, each corresponding to a test environment: simple VM, VM with Docker, VM with application... Depending on the lab, we will specify which one to use:
cd logstash-formation/tp/REPCreating the Environment
Once in the folder corresponding to the desired environment, you can launch the creation of the environment on VirtualBox with the following Vagrant command:
vagrant up
Difficulty level : ●○○○○ (1/5)
My progress
Sign in to track your progress and take notes. Sign in
Course Glossary
Lightweight Agent
A data collection program installed on a host system, designed to consume minimal resources (CPU, RAM). Example: Filebeat, Promtail.
Heavyweight Agent
A collection program equipped with extensive local features (processing, filtering, buffering) that consumes more system resources. Example: Logstash.
Beats
Lightweight data shippers (like Filebeat, Metricbeat, etc.) installed on servers to collect and send various types of operational data (logs, metrics)...
Recommended Articles
Beats : aller plus loin (sécurité, performances, Elastic Agent et migration vers Alloy)
Industrialiser Filebeat, Metricbeat et les autres Beats : sorties sécurisées, processors, modules...
Bonnes pratiques Beats : Filebeat, Metricbeat et collecte fiable
Bonnes pratiques Beats : filestream, modules, processors, files d'attente sur disque, sorties séc...
Understanding the Elastic Common Schema (ECS)
As always in our consulting engagements, we recommend that companies harmonise and standardise: k...
Kibana : rôle, installation et premiers pas
Ce qu'est Kibana dans la suite Elastic, comment l'installer avec Elasticsearch (start-local, Dock...
Fluent Bit : les outputs (sorties), routage et fiabilité de l'envoi
Envoyer les données de Fluent Bit : routage par Match et Match_Regex, sorties Loki, Elasticsearch...
Ingestion Elasticsearch : Bulk API, ingest pipelines, enrich et reindex
Ingérer et transformer des données dans Elasticsearch : Bulk API, ingest pipelines et processeurs...
Elastic Observability : logs, infrastructure, APM et synthétiques
Les fonctions d'Elastic Observability : exploration des logs, inventaire d'infrastructure avec El...
Collecteurs de logs légers : Fluent Bit, Vector et les autres
Pourquoi un collecteur de logs, ce qui distingue les agents légers (Fluent Bit, Vector) des colle...
Fluent Bit : les inputs (entrées) du pipeline en détail
Tout sur les inputs de Fluent Bit : rôle des tags, lecture de fichiers avec tail (positions, rota...