Book Image

Learning Kibana 7 - Second Edition

By : Anurag Srivastava, Bahaaldine Azarmi
Book Image

Learning Kibana 7 - Second Edition

By: Anurag Srivastava, Bahaaldine Azarmi

Overview of this book

<p>Kibana is a window into the Elastic Stack that enables the visual exploration and real-time analysis of your data in Elasticsearch. This book will help you understand how you can use Kibana 7 for rich analytics and data visualization. </p><p>If you’re new to the tool or want to get to grips with the latest features introduced in Kibana 7, this book is the perfect beginner's guide. You’ll learn how to set up and configure the Elastic Stack and understand where Kibana sits within the architecture. As you advance, you’ll learn how to ingest data from different sources using Beats or Logstash into Elasticsearch, followed by exploring and visualizing data in Kibana. Whether working with time-series data to create complex graphs using Timelion or embedding visualizations created in Kibana into your web applications, this book covers it all. It also covers topics that every Elastic developer needs to be aware of, such as installing and configuring application performance monitoring (APM) servers and agents. Finally, you’ll also learn how to create effective machine learning jobs in Kibana to find anomalies in your data. </p><p>By the end of this book, you’ll have a solid understanding of Kibana, and be able to create your own visual analytics solutions from scratch.</p>
Table of Contents (16 chapters)
Free Chapter
1
Section 1: Understanding Kibana 7
4
Section 2: Exploring the Data
7
Section 3: Tools for Playing with Your Data
10
Section 4: Advanced Kibana Options

Understanding logs

I would like to start this chapter by discussing logs, as they are a very important part of any system. By using log information, we can access the details of a system relatively easily. But what is a log? Well, a log is an event that contains a timestamp and a description of the event itself. It is appended to a journal or log file sequentially, where all of the lines of the logs are ordered based on the timestamp. As an example, here is an Apache server log:

127.0.0.1 - - [02/Apr/2019:10:15:22 +0530] "POST /blog/admin.php HTTP/1.1" 302 326 "http://localhost/blog/admin.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0"

Looking at the preceding code, we can guess the meaning of certain information, such as an IP address (127.0.0.1), a timestamp (02/Apr/2019:10:15:22 +0530), an HTTP verb (POST), and...