208
F. Firouzi and B. Farahani
c
{“query”: {
“match”: {
“person”: “farshad firouzi”}}}
{
“took”: 13,
“time_out”: false,
“_shards”: {
“total”: 3,
Query
Response
c
Node
Node
Node
via APIs
Data nodes
…
Client nodes
The client node routes the data-related request to every data nodes in
the cluster.
Fig. 4.23 How Elasticsearch query works
Analysis
Elasticsearch
Archiving
Monitoring
Alerting
Fig. 4.24 How Logstash works
ously, converts it, and then transmits it to a destination, such as Elasticsearch. Main
features of Logstash include (Fig. 4.24) [23]:
• Data Ingestion – Data can be scattered or siloed across multiple systems and in
diverse formats; Logstash is able to handle various inputs that gather events/data
from a mass of different sources such as logs, web applications, data stores, as
well as AWS services in a streaming manner.