Automic Workload Automation

 View Only

ELK-stack + grok + filebeat => experiences?

  • 1.  ELK-stack + grok + filebeat => experiences?

    Posted Apr 16, 2018 03:58 AM

    We're evaluating ELK (Elasticsearch, Logstash, Kibana) at the moment to combine the logfiles from the automation engine (WPs/CPs), the APIs, the agents and the database.


    Has anyone tried this before? What are your experiences?


    And here's the question, has anyone of you this already in production? Have you defined grok pattern for logstash for the agents? What's about an filebeat-a-like daemon for solaris?


    I've defined some for engine log parsing:


    AETIMESTAMP [0-9]{8}
    AETIME [0-9]{6}\.[0-9]{3}
    AEUNUMBER U[0-9]{8}