Elasticsearch (ELK stack)

As we have seen so far in this chapter, using just the Python tools as we have done would adequately monitor your network with enough scalability for all types of networks, large and small alike. However, I would like to introduce one additional open source, general-purpose, distributed search and analytics engine called Elasticsearch (https://www.elastic.co/). It is often referred to as just Elastic or ELK stack for combining Elastic with the frontend and input packages Logstash, and Kibana, respectively.

If you look at network monitoring in general, it is really about analyzing network data and making sense out of it. The ELK stack contains Elasticsearch, Logstash, and Kibana as a full stack to ingest information ...

Get Mastering Python Networking - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.