GitLab Product Walk-Throughs - All, 22 Mar 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Elastic-Discover-walkthrough-part1

Description

No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).

A

Oh, this is show tutorial on the way elastic is presenting they're logged. The first screen that you see here is the discovery why this is. This is the most common UI and it did everyone that used the use, Cabana and elastic is familiar with, and you can see that when I open this, you I immediately see the stream of logs that have been collected.

A

You can see that the latest slope is in the top and scroll down I go back in time in terms of the time picker. There are multiple ways to interact with there with a tour, multiple ways to select. Anyway, you have an absolute.

A

For the stardate so can select the date, and it immediately provides me with.

A

With the start date, up until now, I can change the now and to be different with a different time. We can be a relative time.

A

A

Know when I, when I, will click on the update, it will refresh the page you can see here. A histogram of the total logs that I have I can select a time for him zooming in on the logs, and this page will get refresh. Those are the logs. By the way you can see that I have a timestamp and a source.

A

The logs in elastic are structured, which means that they have several fields so, for instance, I can present it in a table view, and this is the log and since its stock, the globe I can see additional poverty, such as the cloud availability zone, machine-type and usually, if I will open this log. I will just see seek this text in the text that is on the right column. The left column is what what elastic add to to my lungs and what else do I see here.

A

So on the left side, I can see all of those fields and.

A

Basically, the structure of the logs of all the logs that I'm collecting I can pin a specific field. Let's see if I can find something interesting, maybe a date. Usually a number is something that.

A

There is a timestamp here, so if I click on edit on add.

A

So it was that edit here so I can see this when, if I, if I load like more fields and we be able to see those I will pin them to the and to dy and now I can filter by this consult. So I can sort by.

A

This it's really helpful when you're doing an investigation and it's like you're sorting by time you can sort by other parameters. I.

A

Have the regular search if I want to look for a specific word.

A

So he's looking for this string.

A

Probably haven't you.

A

Search can take a while, okay, so find the search. I will open it. You can see that it is highlighting the world and it's actually on the message you.

A

Okay, yes, you want else, so elastic has its own query language. It is called kql query. Language are important, and this is something that is quite popular with some of our solution without the logging solution. So I can look, for instance, a.

A

Specific field when I will start type this field I'll immediately get an autocomplete. So let's say I want to look for all the logs that the kubernetes container name and those are the operators is equal.

A

Should have an autocomplete here as well.

A

Yes, so it provides me with all the container name option so, for instance, I wanna see all my and.

A

Any other part of the deterrent.

A

Those are all the plugs are coming for. My the container that his name is exchange. Those are the MongoDB logs yeah. You can see that the data set is MongoDB dot. Log event model is.

A

A

Yes, this is it I have something else. Ok, so it seems that on the time, picker I also have an option to click and see the common use. Time ranges that are available past the one that I've used I can also set the refresh rate every X amount of second.

A

A

Can also see a single single document. The document is a log entry. By the way you saw that the page is being refreshed now, every second.

A

Your surrounding document will give me five new five new document before and five new document after the document is a log entry.

A

And see what sighs.

A

Look at the search query: query that I have I can save the quiz.

A

I'm gonna have different filters based on the fields. So, if I want to see all the so we looked at the kubernetes.

A

A

Container name.

A

A

Now save this filter and it will remain here now. All the logs that are see here will be filtered by this field of the tech Haydn and now I can continue doing my search based only on those printed on the three problems.

A

I can able and disabled the queer the KQ elder keep on a query language and use only the blue scene. Syntax blue scene is the engine that is on in behind elasticsearch.

A

A