Webserver access log best practices

Elastic Stack Elasticsearch
1

Goal :
To create websites analytics (click analytics, access time, etc)

Plan:
Log click metrics data to apache2 access log. Analytics are simply posted directly using POST / GET request, and preferably with a JSON body to contain more info.
Use filebeat / apache2 module to send logs to logstash. Use logstash grok filtering / mutate to enrich and send to ELK.

Question:
Is this a good practice / pipeline for website analytics? Could anyone recommend any reference to start off with?

Thanks

2

It sounds perfectly fine.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.