RousselTMLEARNING

TP · Beats: From Discovery to Expertise

Setting up the Testing Environment

Oracle VM VirtualBox #

We will use VirtualBox to deploy our test VMs. Some labs will be done on Docker, so if you already have a Docker engine, you can use it instead of deploying a new VM.

You must proceed with the VirtualBox installation following the procedure for your system:

https://www.virtualbox.org/wiki/Downloads

HashiCorp Vagrant #

We will use Vagrant to automatically deploy test environments. To learn more about Vagrant, you can follow our dedicated training.

You must proceed with the Vagrant installation following the procedure for your system:

https://developer.hashicorp.com/vagrant/install

From Concept to Expertise #

We have pre-configured a repo for the training.

  1. Git Repo

    You can use the command below to clone the repo:

    git clone https://github.com/RousselTM/logstash-formation
  2. Environment Choice

    The test environment configurations are in the tp folder. In this folder, there are several subfolders, each corresponding to a test environment: simple VM, VM with Docker, VM with application... Depending on the lab, we will specify which one to use:

    cd logstash-formation/tp/REP
  3. Creating the Environment

    Once in the folder corresponding to the desired environment, you can launch the creation of the environment on VirtualBox with the following Vagrant command:

    vagrant up

Difficulty level : ●○○○○ (1/5)

My progress

  • ⏱ Estimated time : ≈ 21 min

Sign in to track your progress and take notes. Sign in

💬 Ask a question

Course Glossary

Lightweight Agent

A data collection program installed on a host system, designed to consume minimal resources (CPU, RAM). Example: Filebeat, Promtail.

Heavyweight Agent

A collection program equipped with extensive local features (processing, filtering, buffering) that consumes more system resources. Example: Logstash.

Beats

Lightweight data shippers (like Filebeat, Metricbeat, etc.) installed on servers to collect and send various types of operational data (logs, metrics)...

Recommended Articles

Fluent Bit : parsers et filters, structurer et transformer les logs

Structurer et transformer les logs dans Fluent Bit : parsers (json, regex, logfmt, ltsv), parsers...

Data streams et templates Elasticsearch : component templates, index templates et séries temporelles

Gérer les données horodatées avec les data streams : index templates et component templates, conv...

Monitoring et troubleshooting Elasticsearch : santé, shards non assignés, JVM, hot threads et slow logs

Diagnostiquer un cluster Elasticsearch : cluster health et CAT APIs, shards non assignés et alloc...

Alertes, connecteurs et SLO dans Kibana

Créer des règles d'alerte dans Kibana (requête Elasticsearch, ES|QL, seuil personnalisé, logs), c...

Fluent Bit ou Vector ? Choisir, combiner et migrer

Comparer Fluent Bit et Vector (performances, transformations, écosystème, gouvernance), les combi...

Bonnes pratiques de collecte de logs avec Fluent Bit et Vector

Check-list de production pour la collecte de logs : structure, filtrage à la source, masquage, ta...

Grafana Loki vs Elasticsearch : La bataille du stockage de logs

Comparatif entre Loki, le système de logs inspiré par Prometheus, et Elasticsearch, le moteur de ...

ActiveGate et network zones : architecture, routage et haute disponibilité

Comprendre et déployer ActiveGate dans Dynatrace : rôles (routage, API, intégrations cloud, exten...

Architecture distribuée Elasticsearch : rôles des nœuds, shards, répliques et allocation

Comprendre le fonctionnement distribué d'Elasticsearch : rôles des nœuds, nœuds master et quorum,...

Support us

♥ SUPPORT US

Support RousselTM Learning

Courses, articles, labs and certificates stay free with no intrusive ads. A voluntary contribution, of any amount you choose, pays for hosting, lab environments and new content.

Contribute with PayPal Any amount · card or PayPal accountLearn more
QR code PayPal
Or scan this QR code with your phone

Thank you, every contribution counts!