Life is Short Do More

Elasticsearch Components

What are the components of ELK Stack?

- E=? Elasticsearch. 
- It is distributed store, search and analytics engine based on Apache lucene. Elasticsearch is where indexing, search and analytics happens. 

- L=? Logstash.
- Collects, aggregates, enrich and ships data to elasticsearch.

- K=? Kibana.
- With Kibana one can explore, visualize the data in elasticsearch.

- There are few more components that can send data to elasticsearch - Beats, APM, external services.

- There are different kind of beats shipper, for eg. filebeat, metricbeat, packetbeat, winlogbeat etc.
- Beats=? For eg. Filebeat can collect data from files in distributed serevrs and send data to the logstash or directly to elasticsearch.

- APM=? Application Performane Monitoring. Capture and analyze distributed transactions in distributed system and sends the captured trace data to elasticsearch.

- External services=? can send data directly to elasticsearch using elasticsearch api end points.