Skip to content

3. Elasticsearch for logs #5

Description

@ksobrenat32

Elasticsearch deployment (clustered or single-node) with Helm:

helm repo add elastic https://helm.elastic.co
helm install elasticsearch elastic/elasticsearch -n logging --create-namespace

This will also need a script that tails nginx logs and sends them to Elastick search

Research:

  • Index design: mapping fields (IP, bytes, URL, UA, GeoIP).
  • How to use ILM (Index Lifecycle Management) for retention policies.
  • Kibana vs Grafana ES plugin (how to query logs).
  • GeoIP enrichment libraries (Python geoip2 or Logstash-style enrichment if you ever move off custom script).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions