Data Processing with Logstash (and Filebeat)

使用 Logstash 处理数据，这是 ELK 堆栈（Elasticsearch、Logstash、Kibana）和 Elastic Stack 的关键部分

最后更新 06/2021
MP4 | 视频：h264, 1280×720 | 音频：AAC，44.1 KHz，2 Ch
类型：eLearning | 语言：英语 + srt | 时长：53 节课（5h 30m）| 大小：1.44 GB

你会学到什么

了解 Logstash 的基本概念
构建处理和操作数千个事件的管道
将数据从众多来源和多个目的地发送到 Logstash
构建一个功能齐全的管道来处理 Apache Web 服务器日志
使用 Logstash 处理 Filebeat 事件

要求
熟悉基本的终端/命令提示符使用是加分项

说明
新！本课程现在还包括 Filebeat 以及如何将其与 Logstash、Elasticsearch 和 Kibana 集成！

想了解如何使用 Logstash 处理事件？那么你来对地方了; 本课程是 Udemy 迄今为止最全面的 Logstash 课程！本课程专门涵盖 Logstash，这意味着我们可以比本课程涵盖整个 Elastic Stack 更详细。因此，如果您想专门学习 Logstash，那么本课程适合您！

本课程假定您没有使用 Logstash 的先验知识或经验。我们从最基本的开始，逐渐过渡到更高级的主题。该课程旨在让您可以一步一步地跟随整个时间，并且您可以在 GitHub 存储库中找到所有配置文件。本课程涵盖的主题包括处理 Apache Web 服务器日志（访问和错误日​​志）、数据丰富、向 Elasticsearch 发送数据、使用 Kibana 可视化数据，以及您可能遇到的一些流行用例。完成本课程后，您将了解 Logstash 的所有最重要方面，并将能够构建复杂的管道配置并处理许多不同类型的事件和数据。

什么是 Logstash？
如果您不知道 Logstash 的全部内容，它是由 Elasticsearch、Kibana 等背后的公司开发的事件处理引擎。Logstash 经常被用作 ELK 堆栈或 Elastic Stack 的关键部分，因此它与这些技术提供了强大的协同作用。您可以使用 Logstash 处理许多不同类型的事件，一个事件可以是很多东西。您可以处理来自 Web 服务器的访问或错误日志，也可以从电子商务应用程序向 Logstash 发送事件，例如收到订单或处理付款的时间。您可以从文件（平面文件、JSON、XML、CSV 等）中提取数据，通过 HTTP 或 TCP 接收数据，从数据库中检索数据等等。然后，Logstash 使您能够在将事件发送到您选择的目标（例如 Elasticsearch、电子邮件或 Slack）之前对其进行处理和操作。

为什么我们需要 Logstash？
因为通过向 Logstash 发送事件，您可以解耦事物。您有效地将事件处理从 Web 应用程序移出到 Logstash，这意味着如果您需要更改事件的处理方式，例如，您不需要部署新版本的 Web 应用程序。事件处理及其配置集中在 Logstash 中，而不是您触发事件的每个地方。这意味着 Web 应用程序需要做的就是向 Logstash 发送一个事件；它不需要知道事件之后会发生什么以及它在哪里结束。这改进了你的架构，让 Logstash 做它最擅长的事情；处理事件。

让我们开始吧！
我希望你已经准备好开始学习 Logstash。如果您想更详细地查看课程内容，请查看课程表。我期待在课程中见到你！

Process data with Logstash, which is a key part of the ELK stack (Elasticsearch, Logstash, Kibana) and Elastic Stack

Last Updated 06/2021
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 53 lectures (5h 30m) | Size: 1.44 GB

What you’ll learn

Understand the fundamental concepts of Logstash
Build pipelines that process and manipulates thousands of events
Send data to Logstash from numerous sources and to several destinations
Build a fully functional pipeline that handles Apache web server logs
Process Filebeat events with Logstash

Requirements
Familiarity with basic terminal/command prompt usage is a plus

Description
NEW! This course now also includes Filebeat and how to integrate it with Logstash, Elasticsearch, and Kibana!

Want to learn how to process events with Logstash? Then you have come to the right place; this course is by far the most comprehensive course on Logstash here at Udemy! This course specifically covers Logstash, meaning than we can go into much more detail than if this course covered the entire Elastic Stack. So if you want to learn Logstash specifically, then this course is for you!

This course assumes no prior knowledge of or experience with Logstash. We start from the very basics and gradually transition into more advanced topics. The course is designed so that you can follow along the whole time step by step, and you can find all of the configuration files within a GitHub repository. The course covers topics such as handling Apache web server logs (both access and error logs), data enrichment, sending data to Elasticsearch, visualizing data with Kibana, along with covering a number of popular use cases that you are likely to come across. Upon completing this course, you will know all of the most important aspects of Logstash, and will be able to build complex pipeline configurations and process many different kinds of events and data.

What is Logstash?
In case you don’t know what Logstash is all about, it is an event processing engine developed by the company behind Elasticsearch, Kibana, and more. Logstash is often used as a key part of the ELK stack or Elastic Stack, so it offers a strong synergy with these technologies. You can use Logstash for processing many different kinds of events, and an event can be many things. You can process access or error logs from a web server, or you can send events to Logstash from an e-commerce application, such as when an order was received or a payment was processed. You can ingest data from files (flat files, JSON, XML, CSV, etc.), receive data over HTTP or TCP, retrieve data from databases, and more. Logstash then enables you to process and manipulate the events before sending them to a destination of your choice, such as Elasticsearch, e-mail, or Slack.

Why do we need Logstash?
Because by sending events to Logstash, you decouple things. You effectively move event processing out of the web application and into Logstash, meaning that if you need to change how events are processed, you don’t need to deploy a new version of a web application, for instance. The event processing and its configuration is centralized within Logstash instead of every place you trigger events. This means that all the web application needs to do, is to send an event to Logstash; it doesn’t need to know anything about what happens to the event afterwards and where it ends up. This improves your architecture and lets Logstash do what it does best; process events.

Let’s get started!
I hope that you are ready to begin learning Logstash. Have a look around the curriculum if you want to check out the course content in more details. I look forward to seeing you inside the course!

Who this course is for
Developers who want to learn Logstash