Overview¶
SEAL Elastic Stack administers and visualizes the log, statistics, audit and accounting data of PLOSSYS 5 and easyPRIMA.
SEAL Elastic Stack includes the following components:
Elasticsearch¶
Elasticsearch is the distributed search and analytics engine at the heart of Elastic Stack. Elasticsearch is where the indexing, search, and analysis magic happens.
Elasticsearch provides near real-time search and analytics for all types of data. Whether you have structured or unstructured text, numerical data, or geospatial data, Elasticsearch can efficiently store and index it in a way that supports fast searches.
In the software environment of SEAL Sytems products, the follwing data are stored in Elasticsearch:
- accounting, statistics, and logging data for PLOSSYS 5 and Operator
- audit data for PLOSSYS 5 and easyPRIMA
SEAL Elastic Stack provides two different, predefined Filebeat configurations for PLOSSYS 5 and easyPRIMA.
Literature - Elasticsearch
For details on the configuration of Elasticsearch refer to the original documentation of the software producer: Elasticsearch Guide documentation.
Kibana¶
Kibana enables you to give shape to your data and navigate the Elastic Stack. With Kibana, you can:
-
Search, observe, and protect your data. From discovering documents to analyzing logs to finding security vulnerabilities, Kibana is your portal for accessing these capabilities and more.
-
Analyze your data.
Search for hidden insights, visualize what you’ve found in charts, gauges, maps, graphs, and more, and combine them in a dashboard.
-
Manage, monitor, and secure Elastic Stack.
Manage your data, monitor the health of your Elastic Stack cluster, and control which users have access to which features.
Literature - Kibana
For details on the configuration of Kibana refer to the original documentation of the software producer: Kibana Guide documentation.
Filebeat¶
Filebeat is a lightweight shipper for forwarding and centralizing log data. Installed as an agent on your servers, Filebeat monitors the log files or locations that you specify, collects log events, and forwards them either to Elasticsearch or Logstash for indexing.
SEAL Elastic Stack provides two different, predefined Filebeat configurations for PLOSSYS 5 and easyPRIMA.
Literature - Filebeat
For details on the configuration of Filebeat refer to the original documentation of the software producer: Filebeat Reference documentation.
Hint - ELK and Logstash
Versions earlier than PLOSSYS 5.1.0 have been using Elastic Stack ("ELK") with Logstash. Later Versions of PLOSSYS use Filebeat instead of Logstash.