Get in Touch
 Duration 14 hours

Course Outline

Introduction

  • Overview of the Elastic Stack (ELK) for government environments

Elasticsearch

General Overview:

  • Purpose and Operational Necessity
  • Key Definitions: Documents, Indexes, Shards, Nodes, Clusters, and Scaling Strategies (Vertical/Horizontal)

Operations: Configuration and Deployment

  • Configuring Elasticsearch
  • Deploying Elasticsearch
  • Practical Application Exercise

Node Management: Discovery, Categories, and Cluster State

  • Distributed Architecture and Node Discovery
  • Node Roles: Master, Data, Coordinating, and Ingest
  • Master Election Process and Quorum Requirements
  • Cluster State Management
  • Shard Allocation Mechanisms

Data Protection: Snapshotting and Recovery

  • Distinguishing High Availability from Backup Procedures
  • Repository Setup, Snapshot Creation, and Restoration
  • Underlying Technical Mechanics

Production Environment Monitoring

  • Alerting Protocols and Best Practices
  • Java Virtual Machine (JVM) Management
  • Query Performance Optimization
  • Thread Pool Monitoring
  • Diagnostic Procedures for Troubleshooting

Production Operations: Best Practices

  • Memory Allocation
  • Network Configuration
  • Storage and Disk Management
  • Security Posture
  • Cluster Maintenance: Rolling and Full Restarts

Logstash

  • Core Functionality and Role in the Stack
  • Configuration Parameters
  • Components: Inputs, Filters, and Outputs
  • Installation and Setup
  • Backup and Restoration Procedures
  • Cluster Integration and Availability Considerations
  • Operational Best Practices

Kibana

  • Interface Utility and Purpose
  • Configuration Settings
  • User Interface Controls: Time Selection, Search, and Filtering
  • Navigation: Discover, Visualization, and Dashboard Interfaces
  • Installation and Setup
  • Backup and Restoration Procedures
  • Cluster Integration and Availability Considerations
  • Operational Best Practices

Filebeat

  • Log Ingestion and Common Challenges
  • Filebeat Architectural Design
  • Installation and Setup
  • Backup and Restoration Procedures
  • Cluster Integration and Availability Considerations
  • Operational Best Practices

Conclusion and Summary

Requirements

  • Prior experience in system administration
  • Proficiency with the Linux command line interface
  • Existing expertise in Elasticsearch is not required

Target Audience

  • System Administrators

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories