Home
Use Case
Type: Observability / Logging Stack
Typical Use Case: Centralized log ingestion, search, dashboards, alerting
Famous Usage: Elastic Cloud, GitHub actions telemetry, cloud-native platforms

🟦 ELK Stack

Elasticsearch · Logstash · Kibana

LS

Logstash

Data Ingest Pipeline
  • Collects from beats, syslog, cloud logs, app streams
  • Filters, parses, enriches, transforms events
  • Outputs to Elasticsearch for indexing and storage
↓
ES

Elasticsearch

Search & Analytics Engine
  • Distributed indexing and full-text search
  • Aggregations for metrics, trends, anomaly views
  • Scalable shards/replicas, cluster-aware resilience
↓
K

Kibana

Visualization & Dashboards
  • Dashboards, Lens, Discover, saved searches
  • Alerting, anomaly detection with machine learning jobs
  • Role-based access, Spaces, sharing for teams
Flow: Logstash ingests and transforms → Elasticsearch indexes and stores → Kibana visualizes, searches, and alerts.