25 lines
1007 B
Markdown
25 lines
1007 B
Markdown
---
|
||
title: "ELK Stack"
|
||
type: concept
|
||
tags: [Log-Analytics, Open-Source, Elasticsearch, Logstash, Kibana]
|
||
date: 2026-04-14
|
||
---
|
||
|
||
## Definition
|
||
ELK Stack 是开源日志分析技术栈，由 Elasticsearch、Logstash 和 Kibana 三个组件组成，用于日志采集、存储、搜索和可视化。
|
||
|
||
## Components
|
||
- **Elasticsearch**：分布式搜索引擎和存储引擎，用于存储和搜索日志数据
|
||
- **Logstash**：日志处理管道，负责日志的聚合、转换和 enrichment
|
||
- **Kibana**：Web 前端，用于日志数据的可视化、分析和查询
|
||
|
||
## Usage
|
||
ELK Stack 是云环境日志分析的标准开源方案，通过 BEATS 采集日志，Logstash 处理，Elasticsearch 存储，Kibana 可视化。
|
||
|
||
## Connections
|
||
- [[ELK Stack]] ← uses ← [[BEATS]]
|
||
- [[ELK Stack]] ← uses ← [[Logstash]]
|
||
- [[ELK Stack]] ← uses ← [[Elasticsearch]]
|
||
- [[ELK Stack]] ← uses ← [[Kibana]]
|
||
- [[OpenSearch]] ← extends ← [[ELK Stack]]
|
||
- [[Log Analytics]] ← implements ← [[ELK Stack]] |