RousselTMLEARNING

TP · Beats: From Discovery to Expertise

Setting up the Testing Environment

Oracle VM VirtualBox #

We will use VirtualBox to deploy our test VMs. Some labs will be done on Docker, so if you already have a Docker engine, you can use it instead of deploying a new VM.

You must proceed with the VirtualBox installation following the procedure for your system:

https://www.virtualbox.org/wiki/Downloads

HashiCorp Vagrant #

We will use Vagrant to automatically deploy test environments. To learn more about Vagrant, you can follow our dedicated training.

You must proceed with the Vagrant installation following the procedure for your system:

https://developer.hashicorp.com/vagrant/install

From Concept to Expertise #

We have pre-configured a repo for the training.

  1. Git Repo

    You can use the command below to clone the repo:

    git clone https://github.com/RousselTM/logstash-formation
  2. Environment Choice

    The test environment configurations are in the tp folder. In this folder, there are several subfolders, each corresponding to a test environment: simple VM, VM with Docker, VM with application... Depending on the lab, we will specify which one to use:

    cd logstash-formation/tp/REP
  3. Creating the Environment

    Once in the folder corresponding to the desired environment, you can launch the creation of the environment on VirtualBox with the following Vagrant command:

    vagrant up

Difficulty level : ●○○○○ (1/5)

My progress

  • ⏱ Estimated time : ≈ 21 min

Sign in to track your progress and take notes. Sign in

💬 Ask a question

Course Glossary

Lightweight Agent

A data collection program installed on a host system, designed to consume minimal resources (CPU, RAM). Example: Filebeat, Promtail.

Heavyweight Agent

A collection program equipped with extensive local features (processing, filtering, buffering) that consumes more system resources. Example: Logstash.

Beats

Lightweight data shippers (like Filebeat, Metricbeat, etc.) installed on servers to collect and send various types of operational data (logs, metrics)...

Recommended Articles

Beats : aller plus loin (sécurité, performances, Elastic Agent et migration vers Alloy)

Industrialiser Filebeat, Metricbeat et les autres Beats : sorties sécurisées, processors, modules...

Bonnes pratiques Beats : Filebeat, Metricbeat et collecte fiable

Bonnes pratiques Beats : filestream, modules, processors, files d'attente sur disque, sorties séc...

Understanding the Elastic Common Schema (ECS)

As always in our consulting engagements, we recommend that companies harmonise and standardise: k...

Kibana : rôle, installation et premiers pas

Ce qu'est Kibana dans la suite Elastic, comment l'installer avec Elasticsearch (start-local, Dock...

Fluent Bit : les outputs (sorties), routage et fiabilité de l'envoi

Envoyer les données de Fluent Bit : routage par Match et Match_Regex, sorties Loki, Elasticsearch...

Ingestion Elasticsearch : Bulk API, ingest pipelines, enrich et reindex

Ingérer et transformer des données dans Elasticsearch : Bulk API, ingest pipelines et processeurs...

Elastic Observability : logs, infrastructure, APM et synthétiques

Les fonctions d'Elastic Observability : exploration des logs, inventaire d'infrastructure avec El...

Collecteurs de logs légers : Fluent Bit, Vector et les autres

Pourquoi un collecteur de logs, ce qui distingue les agents légers (Fluent Bit, Vector) des colle...

Fluent Bit : les inputs (entrées) du pipeline en détail

Tout sur les inputs de Fluent Bit : rôle des tags, lecture de fichiers avec tail (positions, rota...

Support us

♥ SUPPORT US

Support RousselTM Learning

Courses, articles, labs and certificates stay free with no intrusive ads. A voluntary contribution, of any amount you choose, pays for hosting, lab environments and new content.

Contribute with PayPal Any amount · card or PayPal accountLearn more
QR code PayPal
Or scan this QR code with your phone

Thank you, every contribution counts!