Getting Started with Elastic Stack 8.0: Run powerful and scalable data platforms to search, observe, and secure your organization (Paperback)

Use the Elastic Stack for search, security, and observability-related use cases while working with large amounts of data on-premise and on the cloud

Key Features

- Learn the core components of the Elastic Stack and how they work together
- Build search experiences, monitor and observe your environments, and defend your organization from cyber attacks
- Get to grips with common architecture patterns and best practices for successfully deploying the Elastic Stack

Book Description

The Elastic Stack helps you work with massive volumes of data to power use cases in the search, observability, and security solution areas.

This three-part book starts with an introduction to the Elastic Stack with high-level commentary on the solutions the stack can be leveraged for. The second section focuses on each core component, giving you a detailed understanding of the component and the role it plays. You'll start by working with Elasticsearch to ingest, search, analyze, and store data for your use cases. Next, you'll look at Logstash, Beats, and Elastic Agent as components that can collect, transform, and load data. Later chapters help you use Kibana as an interface to consume Elastic solutions and interact with data on Elasticsearch. The last section explores the three main use cases offered on top of the Elastic Stack. You'll start with a full-text search and look at real-world outcomes powered by search capabilities. Furthermore, you'll learn how the stack can be used to monitor and observe large and complex IT environments. Finally, you'll understand how to detect, prevent, and respond to security threats across your environment. The book ends by highlighting architecture best practices for successful Elastic Stack deployments.

By the end of this book, you'll be able to implement the Elastic Stack and derive value from it.

What you will learn

- Configure Elasticsearch clusters with different node types for various architecture patterns
- Ingest different data sources into Elasticsearch using Logstash, Beats, and Elastic Agent
- Build use cases on Kibana including data visualizations, dashboards, machine learning jobs, and alerts
- Design powerful search experiences on top of your data using the Elastic Stack
- Secure your organization and learn how the Elastic SIEM and Endpoint Security capabilities can help
- Explore common architectural considerations for accommodating more complex requirements

Who this book is for

Developers and solutions architects looking to get hands-on experience with search, security, and observability-related use cases on the Elastic Stack will find this book useful. This book will also help tech leads and product owners looking to understand the value and outcomes they can derive for their organizations using Elastic technology. No prior knowledge of the Elastic Stack is required.

使用彈性堆疊（Elastic Stack）來處理大量的本地和雲端數據，以滿足搜尋、安全和可觀察性相關的需求。

主要特點：
- 學習彈性堆疊的核心組件以及它們如何協同工作
- 構建搜尋體驗，監控和觀察您的環境，並保護組織免受網絡攻擊
- 掌握常見的架構模式和成功部署彈性堆疊的最佳實踐

書籍描述：
彈性堆疊可幫助您處理大量數據，以滿足搜尋、可觀察性和安全解決方案領域的需求。

這本書分為三個部分，首先介紹了彈性堆疊的概述，並對堆疊可應用的解決方案進行了高層次的評論。第二部分重點介紹了每個核心組件，讓您對組件及其角色有詳細的了解。您將從使用Elasticsearch開始，為您的用例載入、搜尋、分析和存儲數據。接下來，您將研究Logstash、Beats和Elastic Agent等組件，這些組件可以收集、轉換和加載數據。後面的章節將幫助您使用Kibana作為介面來使用Elastic解決方案並與Elasticsearch上的數據進行交互。最後一部分探討了彈性堆疊頂部提供的三個主要用例。您將從全文搜索開始，並查看由搜索功能提供動力的實際結果。此外，您還將學習如何使用堆疊來監控和觀察大型和複雜的IT環境。最後，您將了解如何在整個環境中檢測、預防和應對安全威脅。本書最後強調了成功部署彈性堆疊的架構最佳實踐。

通過閱讀本書，您將能夠實施彈性堆疊並從中獲得價值。

您將學到的內容：
- 使用不同節點類型配置Elasticsearch集群以滿足各種架構模式的需求
- 使用Logstash、Beats和Elastic Agent將不同的數據源載入Elasticsearch
- 在Kibana上構建用例，包括數據可視化、儀表板、機器學習任務和警報
- 使用彈性堆疊在數據上構建強大的搜尋體驗
- 保護您的組織，了解彈性安全信息和終端安全功能的幫助
- 探索滿足更複雜需求的常見架構考慮因素

本書適合對彈性堆疊的搜尋、安全和可觀察性相關用例有實踐經驗的開發人員和解決方案架構師。本書還將幫助技術領導和產品負責人了解使用彈性技術為組織帶來的價值和成果。不需要事先了解彈性堆疊。

1. Introduction to the Elastic Stack
2. Installing and Running the Elastic Stack
3. Indexing and Searching for Data
4. Leveraging Insights and Managing Data on Elasticsearch
5. Running Machine Learning Jobs on Elasticsearch
6 .Collecting and Shipping Data with Beats
7. Using Logstash to Extract, Transform, and Load Data
8. Interacting with Your Data on Kibana
9. Managing Data Onboarding with Elastic Agent
10. Building Search Experiences Using the Elastic Stack
11. Observing Applications and Infrastructure Using the Elastic Stack
12. Security Threat Detection and Response Using the Elastic Stack
13. Architecting Workloads on the Elastic Stack

1. Elastic Stack 簡介
2. 安裝和運行 Elastic Stack
3. 數據索引和搜索
4. 在 Elasticsearch 上利用洞察力和管理數據
5. 在 Elasticsearch 上運行機器學習任務
6. 使用 Beats 收集和傳輸數據
7. 使用 Logstash 提取、轉換和加載數據
8. 在 Kibana 上與數據互動
9. 使用 Elastic Agent 管理數據引入
10. 使用 Elastic Stack 構建搜索體驗
11. 使用 Elastic Stack 監控應用程序和基礎設施
12. 使用 Elastic Stack 進行安全威脅檢測和應對
13. 在 Elastic Stack 上架構工作負載