Oracle VM VirtualBox #
We will use VirtualBox to deploy our test VMs. Some labs will be done on Docker, so if you already have a Docker engine, you can use it instead of deploying a new VM.
You must proceed with the VirtualBox installation following the procedure for your system:
https://www.virtualbox.org/wiki/DownloadsHashiCorp Vagrant #
We will use Vagrant to automatically deploy test environments. To learn more about Vagrant, you can follow our dedicated training.
You must proceed with the Vagrant installation following the procedure for your system:
https://developer.hashicorp.com/vagrant/installFrom Concept to Expertise #
We have pre-configured a repo for the training.
Git Repo
You can use the command below to clone the repo:
git clone https://github.com/RousselTM/logstash-formationEnvironment Choice
The test environment configurations are in the tp folder. In this folder, there are several subfolders, each corresponding to a test environment: simple VM, VM with Docker, VM with application... Depending on the lab, we will specify which one to use:
cd logstash-formation/tp/REPCreating the Environment
Once in the folder corresponding to the desired environment, you can launch the creation of the environment on VirtualBox with the following Vagrant command:
vagrant up
Difficulty level : ●○○○○ (1/5)
My progress
Sign in to track your progress and take notes. Sign in
Course Glossary
Lightweight Agent
A data collection program installed on a host system, designed to consume minimal resources (CPU, RAM). Example: Filebeat, Promtail.
Heavyweight Agent
A collection program equipped with extensive local features (processing, filtering, buffering) that consumes more system resources. Example: Logstash.
Beats
Lightweight data shippers (like Filebeat, Metricbeat, etc.) installed on servers to collect and send various types of operational data (logs, metrics)...
Recommended Articles
Fluent Bit : parsers et filters, structurer et transformer les logs
Structurer et transformer les logs dans Fluent Bit : parsers (json, regex, logfmt, ltsv), parsers...
Data streams et templates Elasticsearch : component templates, index templates et séries temporelles
Gérer les données horodatées avec les data streams : index templates et component templates, conv...
Monitoring et troubleshooting Elasticsearch : santé, shards non assignés, JVM, hot threads et slow logs
Diagnostiquer un cluster Elasticsearch : cluster health et CAT APIs, shards non assignés et alloc...
Alertes, connecteurs et SLO dans Kibana
Créer des règles d'alerte dans Kibana (requête Elasticsearch, ES|QL, seuil personnalisé, logs), c...
Fluent Bit ou Vector ? Choisir, combiner et migrer
Comparer Fluent Bit et Vector (performances, transformations, écosystème, gouvernance), les combi...
Bonnes pratiques de collecte de logs avec Fluent Bit et Vector
Check-list de production pour la collecte de logs : structure, filtrage à la source, masquage, ta...
Grafana Loki vs Elasticsearch : La bataille du stockage de logs
Comparatif entre Loki, le système de logs inspiré par Prometheus, et Elasticsearch, le moteur de ...
ActiveGate et network zones : architecture, routage et haute disponibilité
Comprendre et déployer ActiveGate dans Dynatrace : rôles (routage, API, intégrations cloud, exten...
Architecture distribuée Elasticsearch : rôles des nœuds, shards, répliques et allocation
Comprendre le fonctionnement distribué d'Elasticsearch : rôles des nœuds, nœuds master et quorum,...