Start learning ELK

[bharatchhajed]

Hi All,

Can someone point me to the right direction to start learning ELK. I have gone through online and it looks like it is its is for older version. Any links might help

Cheers!

[warkolm (Mark Walkom)]

What do you want to use it for?

[bharatchhajed]

We use ES and kibana for log analysis. I can build basic dashboard on Kibana. There are at a times i would need to split the data and build the charts which i am not sure how to do it.

There are may more things I would need to do but because of limited tutorials available, unable to proceed further.

HELP: Grouping and combine fields

@bharatchhajed The reason why it is showing 9 is because when you do a terms aggregation (for piechart) , each of these entries are unique terms (ABC-11-2019 for e.g. is not the same as ABC-01-2019). So the total unique terms turns out to be 9 and not 3. If you are using Logstash to ingest your logs, you could parse that field with something like below (if ABC or XYZ is always going to be in the beginning) ruby { code => "event.set('prefix', event.get('value').split('-').first)" } and t…