ELK stack
The ELK stack is a collection of Elasticsearch, Logstash, and Kibana components for ingesting, processing, searching, analyzing, and visualizing data.
Elasticsearch in Action, Second Edition
The Elastic Stack is a collection of data collection, processing, search, analytics, and visualization products that includes Beats, Logstash, Elasticsearch, and Kibana.
- How it is used
- Coordinates data ingestion, processing, search, analytics, visualization, observability, and security operations.
- How deep it goes
- Defines each component and its pipeline role, but stops short of detailed product implementation.
- Examples
- Uses application logs, machine metrics, real-time events, debugging, dashboards, and large-scale organizational deployments.
- What you can do after
- Operate a data pipeline that feeds Elasticsearch for searchable analysis and Kibana-based visualization.
Read how Elasticsearch in Action, Second Edition explains ELK stack →
Data-Driven Cybersecurity
The ELK stack is a collection of Elasticsearch, Logstash, and Kibana components for collecting, searching, analyzing, and visualizing data.
- How it is used
- Supports vulnerability and incident analysis by collecting, querying, correlating, and visualizing security data for risk decisions.
- How deep it goes
- Explains component roles and operational setup, including ingestion pipelines, Elasticsearch queries, Kibana dashboards, and forecasting, but not configuration details.
- Examples
- Uses vulnerability reports, historical attacks, threat feeds, system logs, network data, indicators of compromise, and security dashboards.
- What you can do after
- Operate/configure it to ingest security data, query incident patterns, visualize risk, and support investigative prioritization.
Related concepts
- Elasticsearchhas part · Elasticsearch is a distributed search and analytics engine that indexes data for searching, retrieval, and analysis.
- Logstashhas part · Logstash is an open-source server-side data-processing pipeline that collects, transforms, enriches, and routes event data.
- Kibanahas part · Kibana is an open-source web interface for searching, analyzing, visualizing, monitoring, and dashboarding data stored in Elasticsearch.
- Wazuhused by · Wazuh is an open-source security platform for threat detection, file-integrity monitoring, vulnerability detection, and compliance analysis.
- machine learninguses · Machine learning is a field of computational methods in which systems learn patterns or relationships from data to make predictions, decisions, or other outputs.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.