Elastic Stack

Avantages

One of the best features I like is that Elastic built their own kubernetes operator to extend the k8s orchestration and make it easy to deploy, scale, change, secure and configure hot-warm infrastructures. Their operator saves a ton of time during configuration. I have deployed stacks on different k8s architectures like Azure Kubernetes Service, Amazon Elastic Kubernetes Service and small on prem clusters with microk8s without issues. When we reach performance thresholds we add more elastic nodes and ECK secures and joins it to the cluster and in minutes we can leverage the extra compute. A lot of changes that are done after going to PROD are non-disruptive since ECK is aware of the main node and makes sure to pass the master role before the main one is re-deployed. I have also migrated Elastic Cloud Enterprise deployments running on bare metal and the stability of ECK is unmatched.

Inconvénients

Currently it is not recommended or supported for a PROD cluster to do its own self monitoring so you have to deploy a monitoring cluster. In cloud scenarios this adds costs and extra complexity so it will be great to have this feature supported.

Avantages

It has open source version so that anyone can start using without worrying about cost. It is also widely used, so once you are familiar with ELK, you are likely to have a good fundamental knowledge of how monitoring, logging... works

Inconvénients

To a certain extent, it gets complicated when it comes to set up, scale and manage infrastructure. Also, out of the box integration with popular tools are not as great as other alternatives.

Alternatives envisagées 

Pourquoi passer à Elastic Stack

Avantages

It is a super fast and efficient data extraction tool. Recommended for medium-sized projects.
Handles large amounts of data, is scalable.

Inconvénients

Usable from any device, however these must be state-of-the-art and offer great calculation speeds and ram storage.

Avantages

I mostly like the Elastic Search queries. Those follow a certain standard and work very well. Data retrieval is very easy and fast in Elastic Search.Visualizing data thru Kibana is very smooth and straightforward. It supports a couple of inbuilt dashboards to represent the data nicely.

Inconvénients

Nothing to dislike about Elastic Stack. The only thing is configuration and setup should be correct. It could take some time for beginners.

Avantages

1.Allows Faster searching and query operations
2.Provides with easy data visualization for analysis
3.Support for multiple data sources
4.Good SDK support for quick integration with application
5.Scalable as per the requirement with support of kubernetes

Inconvénients

1.UI is simple ,could be made more robust and dynamic
2.Calculations and processing speed can be further improved
3.Proper usage knowledge is required when using it on scalable platforms

Avantages

Handles a ton of traffic without issues given enough hardware

Inconvénients

Hardware requirements might be too much for little deployments.

Avantages

Using elastic stack I can easily track my application logs.

Inconvénients

I liked almost all the features but there is still scope in the dashboard.

Avantages

We are using ELK Stack SIEM, a scalable aggregation engine that helps us find patterns in our data as well as provides a wide array of customizable analytics and reports. With Elastic Stack, we have a better understanding of flaws and security issues, particularly memory tier support that ensures the security of our data and networks.

Inconvénients

It is very challenging and time-consuming to upgrade cluster node roles and data replication.

Avantages

Searching is where elasticsearch is second to none, either in terms, n-grams or full-text. Latest releases have greatly improved the aggregation performance, so it's also a great fit for analytics workloads. The customizable sharding and replica configurations make is very reliable too.

Inconvénients

Searching and joining different documents has room for improvement, it's usualy not as fast as we would like it to be, so most of the times we end up un-normalizing documents and en-richening their data to boost searching performance.

Avantages

When you want to run queries in big data and get results, you can get results much faster from relational databases. Queries are also easy to create

Inconvénients

We sometimes have problems during the integration of Kibana. But we couldn't figure out why
Other than that, I didn't have any problems

Avantages

I really like how multiple inputs can be managed at the same time.

Inconvénients

The multiple versions of API and multiple possible format make it quite hard to get the correct one - mostly when a new release is out and user is pushed to use it - without proper support.

Avantages

Elastic search is very fast, it returns the results within a few milliseconds. We can connect Logstash and Kibana very easily with Elastic.The filters in Kibana are very good. We can sort the data as needed.

Inconvénients

I don't think there is anything to dislike about Elastic.

Avantages

Natural language processing like stemming, removing stopwords, multilingual search, tokenized storage etc.

Inconvénients

When there is a large text searches, the elastic search sometime crashes. This needs to be optimized.

Avantages

Widely-supported, almost a pioneer software for logging. Even now, most logging tools actually leverage ELK under-the-hood for their analysis or collection.

Inconvénients

Pattern-matching needs to be more user-friendly, it would be best if they were able to leverage conventional regex usage instead of their custom format. Elastic RegExp queries must match the entire string and take a bit of learning, see here for syntax documentation: [SENSITIVE CONTENT]

Alternatives envisagées 

Avantages

Lightening fast, we built BI dashboards and the 5 years reports data gets populated within seconds that would otherwise takes hours traditionally database or BI tool

Inconvénients

Very Big learning curve, first tie deployment takes very long time to make it work perfectly and then optimize it. need very good technical expertise

Avantages

Die search engine ist der Hammer. Die Software funktioniert gut, zuverlässig und performant.

Inconvénients

In 4 Jahren hat 3 mal der Firmensitz gewechselt, letztes mal ins Ausland. Cowboy-Manieren beim Vertragsverlängerung - friss unsere AGBs (in Business-English) oder stirb. Ständig wechselnde Ansprechpartner. Rechnungen mit wechselnden Kontoverbindungen.

Avantages

We user Kibana's dashboard and also part of it for data analysis of our tool. It allows us to look and compare historical data and gives us a great visualisation, analytic tools and data sharing options of all the data collected by our scanner.

Inconvénients

I enjoy working with the tool, however, I am missing quite some UX design improvements that could really improve the interaction with Kibana. Moreover, I could use an option of saving the templates or most recent types of searches into some kind of database so we would not need to setup these all over again.

Avantages

It is very easy to deploy using docker containers and Kubernetes support. It's very easy to query a high volume of data and get results in seconds. Its easy-to-use UI is self-explanatory and also the forum support and documentation are quite helpful.

Inconvénients

Sometimes it crashes in between. Query structure is somewhat completed, and can be made simple with more specific examples to use directly in projects.

Avantages

the very powerful search engine I search around 5 million log in a second only.
Very nice real-time dashboard, I can integrated with other software and see all the view of network traffic, traffic flow very well.

Inconvénients

well I would say, it's pretty good already, but still some function need to use command alot.

Avantages

This is best search software for data searching and analytics on stream data in cloud. It is so flexible complex keyword searches and very efficient. Great tool for analyzing logs very powerful. 24/7 customer support.

Inconvénients

Not really a negative side but if you have low bandwidth web interface will become very slow.And think learning manual still needs some improvement.

Avantages

Elasticsearch is quite powerful and fast. You can implement it to any enterprise software independent of the scale. It's well documented and getting frequent updates. It's also a reliable software that you can use in mission-critical operations.

Inconvénients

Breaking changes between different versions are hard to deal with. Each major version upgrade of ElasticSearch is bringing new functionality, improved security, and speed - but at the same time, it requires you to update your indexes, which is not an easy task if you don't have a strong infrastructure team.

Avantages

Provides great features for log ingestion, normalisation and visualisation.
Has a free open source tier which can be used to cover many use cases.
Visualisation options are diverse and powerful.
Solid community support in forums.

Inconvénients

Initial setup can be tedious and is rather complex.
The provided security ruleset tends to produce many false positives and requires fine tuning.
Log ingestion options are not entirely covered by the web user interface.

Avantages

1. End to End Solution of enterprise logs with services such as Logstash, Elastic and Kibana.
2. Strong User Community and support.
3. Easy to use and implement.
4. Proactive updates on possible downtimes.
5. Dashboards for easy navigation.

Inconvénients

1. Cloud performance is slower than on premises installation.
2. It crashes in between which delay things sometimes.

Avantages

Elasticsearch offers a very flexible system for adding search capability to your systems. It is also capable of much more. The REST API and great documentation makes getting started very simple. Elasticsearch was also designed with scaling in mind. Adding nodes and self balancing is quite easy. AWS offers hosted Elasticsearch that makes spinning up your first cluster as simple as a few clicks.

Inconvénients

Writing complicated queries can be quite tedious at times. The JSON interface is not always easy to read when trying to match up parentheses. Upgrading from older versions is not a simple process.

Avantages

It is good to store and monitor logs with Kibana.

Inconvénients

The elasticsearch version management is bad because next version could have critical changes from previous.