Feb 9 · 18 min read · System Architecture Overview: Three-tier distributed system using separate VMs for application, monitoring, and logging - mimicking production infrastructure. Why This Architecture: Separation of Concerns: Each VM has a dedicated role (app/monitori...
Join discussion
Oct 26, 2025 · 4 min read · Collecting and Analyzing Logs with ELK Stack (Elasticsearch, Logstash, Kibana, and Filebeat) 🧩 Overview & Objectives In this guide, we’ll build a complete log collection and visualization pipeline using the ELK Stack — Elasticsearch, Logstash, Kiban...
Join discussion
Oct 12, 2025 · 8 min read · Introduction This article is part of the LAB | Cybersecurity series. Ubuntu & Windows are used as log sources, with Graylog Sidecar for centralized configuration/management of agents, and Filebeat / NXLog as the log shippers. Filebeat compensates for...
Join discussionOct 12, 2025 · 5 min read · 前言 本篇為 資安LAB系列。Ubuntu & Windows為日誌來源，搭配Graylog Sidecar設定與管理 agent，並實做透過Filebeat、NXLog來傳送日誌，Filebeat補足Syslog的不足，NXLog補足Window無法直接傳送Log的缺點 介紹 Graylog Sidecar Sidecar 不是用來「收日誌」的工具，而是安裝在各台來源主機上的代理管理。 從 Graylog 伺服器拉取並套用你在 UI 裡定義好的收集設定 (Collector Configur...
Join discussionJul 24, 2025 · 17 min read · Introduction In the world of DevOps, monitoring and logging are non-negotiable essentials. They provide real-time visibility into system health, help debug issues faster, and ensure proactive performance tuning. Without robust observability, even the...
Join discussion
Sep 30, 2024 · 4 min read · Elasticsearch is a highly scalable, distributed search engine that forms the core of the ELK Stack (Elasticsearch, Logstash, Kibana). It is responsible for storing, indexing, and searching log data. Here's a breakdown of its role: Data Storage: Elas...
Join discussion
Jul 3, 2024 · 9 min read · In this, we’ll learn to set up an ElasticSearch Stack on AWS EC2. Elastic Stack consists of ElasticSearch, Filebeat, LogStash, and Kibana(ELK stack) which brings all the logs and traces into a single place. This is one of the most popular tools for s...
Join discussion
Jun 2, 2024 · 3 min read · Filebeat is a lightweight log shipper from the Elastic Stack used to collect and forward logs from various sources. While it doesn't natively parse JSON data within log lines, you can configure it to handle JSON logs and send them for further process...
Join discussionMay 16, 2024 · 3 min read · Streamlining Log Parsing with Filebeat Dissect In log management, efficiently extracting valuable insights from raw log data is important. Filebeat, a part of the Elastic Stack, offers the dissect processor as a powerful tool to achieve this objectiv...
Join discussionJan 1, 2024 · 2 min read · In the preceding article, we explored Logstash's capability to ingest logs from a file. In this subsequent integration discussion, we will examine the comprehensive end-to-end integration process for handling logs. This process involves the local sto...
Join discussion