Elasticsearch is a distributed search and analytics engine for indexing and querying structured or unstructured data. In centralized logging, applications emit standardized log events to Kafka, which transfers them to Elasticsearch for indexing and analysis. section 5.1.3
Elasticsearch handles large log volumes, indexes new data within seconds, and supports complex searches. Users access indexed events through its REST API or Kibana, which provides SQL-like queries and real-time dashboards. OpenSearch and OpenSearch Dashboards offer analogous alternatives. section 5.1.3
Figure 5.6 Conceptual flow for log data collection: log data is sent from the application to Kafka for processing, then indexed in Elasticsearch, and finally visualized in Kibana.
Follow the conceptual flow from application log events through Kafka and Elasticsearch to Kibana visualization. section 5.1.3




