{"id":667,"date":"2024-01-28T15:01:36","date_gmt":"2024-01-28T15:01:36","guid":{"rendered":"https:\/\/virtualall.sk\/?p=667"},"modified":"2026-09-11T13:52:55","modified_gmt":"2026-09-11T13:52:55","slug":"azure-virtual-elasticsearch-log-server","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2024\/01\/azure-virtual-elasticsearch-log-server\/","title":{"rendered":"Azure Elasticsearch Log Server"},"content":{"rendered":"\n

Elasticsearch je distribuovan\u00fd vyh\u013ead\u00e1vac\u00ed a analytick\u00fd n\u00e1stroj postaven\u00fd na Apache Lucene. Je to open-source softv\u00e9r, ktor\u00fd umo\u017e\u0148uje efekt\u00edvne vyh\u013ead\u00e1vanie, filtrovanie a analyzovanie ve\u013ek\u00e9ho mno\u017estva \u0161trukt\u00farovan\u00fdch alebo ne\u0161trukt\u00farovan\u00fdch d\u00e1t. Elasticsearch je \u010dasto vyu\u017e\u00edvan\u00fd na spracovanie a indexovanie obrovsk\u00fdch objemov \u00fadajov a je zn\u00e1my svojou schopnos\u0165ou r\u00fdchlo vyh\u013ead\u00e1va\u0165 inform\u00e1cie.<\/p>\n\n\n\n

Hlavn\u00fdmi charakteristikami Elasticsearch s\u00fa:<\/p>\n\n\n\n

    \n
  1. Full-textov\u00e9 vyh\u013ead\u00e1vanie:<\/strong> Elasticsearch umo\u017e\u0148uje efekt\u00edvne vyh\u013ead\u00e1va\u0165 text v r\u00e1mci ve\u013ek\u00e9ho mno\u017estva dokumentov. Dok\u00e1\u017ee pracova\u0165 s r\u00f4znymi typmi d\u00e1t, od textov\u00fdch dokumentov po \u0161trukt\u00farovan\u00e9 d\u00e1ta.<\/li>\n\n\n\n
  2. Distribuovan\u00fd syst\u00e9m:<\/strong> Elasticsearch je navrhnut\u00fd tak, aby bol schopn\u00fd \u0161k\u00e1lova\u0165 horizont\u00e1lne. To znamen\u00e1, \u017ee m\u00f4\u017ee by\u0165 nasaden\u00fd na viacer\u00fdch serveroch, \u010d\u00edm zvy\u0161uje svoju v\u00fdkonnos\u0165 a odolnos\u0165 vo\u010di chyb\u00e1m.<\/li>\n\n\n\n
  3. Indexovanie:<\/strong> D\u00e1ta v Elasticsearch s\u00fa ulo\u017een\u00e9 v indexoch, ktor\u00e9 umo\u017e\u0148uj\u00fa r\u00fdchle a efekt\u00edvne vyh\u013ead\u00e1vanie. Indexy obsahuj\u00fa analyzovan\u00e9 a tokenizovan\u00e9 d\u00e1ta, \u010do zvy\u0161uje presnos\u0165 vyh\u013ead\u00e1vania.<\/li>\n\n\n\n
  4. RESTful API:<\/strong> Elasticsearch poskytuje jednoduch\u00e9 RESTful API, \u010do umo\u017e\u0148uje jednoduch\u00fa integr\u00e1ciu s r\u00f4znymi aplik\u00e1ciami a programovac\u00edmi jazykmi.<\/li>\n<\/ol>\n\n\n\n

    Elasticsearch sa \u010dasto vyu\u017e\u00edva v r\u00f4znych oblastiach, vr\u00e1tane:<\/p>\n\n\n\n

      \n
    • Logovanie:<\/strong> Zbieranie, ukladanie a analyzovanie logov z aplik\u00e1ci\u00ed a syst\u00e9mov.<\/li>\n\n\n\n
    • Monitoring a anal\u00fdza:<\/strong> Sledovanie v\u00fdkonu syst\u00e9mov a anal\u00fdza d\u00e1t na podporu rozhodovania.<\/li>\n\n\n\n
    • Vyh\u013ead\u00e1vanie:<\/strong> R\u00fdchle a efekt\u00edvne vyh\u013ead\u00e1vanie v obsahu dokumentov.<\/li>\n\n\n\n
    • Business Intelligence:<\/strong> Anal\u00fdza d\u00e1t pre podporu obchodn\u00fdch rozhodnut\u00ed.<\/li>\n<\/ul>\n\n\n\n

      Celkovo lze \u0159\u00edci, \u017ee Elasticsearch je mocn\u00fd n\u00e1stroj pre vyhled\u00e1v\u00e1n\u00ed a anal\u00fdzu \u00fadajov, ktor\u00fd nach\u00e1dza uplatnenie v r\u00f4znych odvetviach a aplik\u00e1ci\u00e1ch.<\/p>\n\n\n\n

      Logovanie pomocou Elasticsearch datab\u00e1zy sa \u010dasto vyu\u017e\u00edva na sledovanie, ukladanie a anal\u00fdzu logov z r\u00f4znych syst\u00e9mov a aplik\u00e1ci\u00ed. Tu s\u00fa niektor\u00e9 z mo\u017enost\u00ed a v\u00fdhod tohto typu logovania:<\/p>\n\n\n\n

      Mo\u017enosti logovania pomocou Elasticsearch:<\/h3>\n\n\n\n
        \n
      1. Centralizovan\u00e9 ukladanie logov:<\/strong>\n
          \n
        • Elasticsearch umo\u017e\u0148uje centralizovan\u00e9 ukladanie logov z r\u00f4znych zdrojov do jedn\u00e9ho distribuovan\u00e9ho \u00falo\u017eiska. T\u00fdm sa u\u013eah\u010duje sledovanie a anal\u00fdza logov na jednom mieste.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
        • R\u00fdchle a efekt\u00edvne vyh\u013ead\u00e1vanie:<\/strong>\n
            \n
          • Elasticsearch pon\u00faka siln\u00e9 full-textov\u00e9 vyh\u013ead\u00e1vanie, \u010do znamen\u00e1, \u017ee m\u00f4\u017eete r\u00fdchlo a efekt\u00edvne vyh\u013ead\u00e1va\u0165 v logoch. To je u\u017eito\u010dn\u00e9 pri identifik\u00e1cii a rie\u0161en\u00ed probl\u00e9mov, monitorovan\u00ed v\u00fdkonu alebo h\u013eadan\u00ed d\u00f4le\u017eit\u00fdch inform\u00e1ci\u00ed.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
          • Indexovanie a \u0161trukt\u00farovan\u00e9 logy:<\/strong>\n
              \n
            • D\u00e1ta v Elasticsearch s\u00fa ulo\u017een\u00e9 v indexoch, ktor\u00e9 umo\u017e\u0148uj\u00fa r\u00fdchle indexovanie a vyh\u013ead\u00e1vanie. Logy m\u00f4\u017eu by\u0165 \u0161trukt\u00farovan\u00e9, aby bolo jednoduch\u0161ie identifikova\u0165 a analyzova\u0165 konkr\u00e9tne inform\u00e1cie.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
            • Rozsiahle mo\u017enosti filtrovania:<\/strong>\n
                \n
              • Elasticsearch umo\u017e\u0148uje pou\u017e\u00edvanie r\u00f4znych filtrov na vyh\u013ead\u00e1vanie konkr\u00e9tnych typov logov alebo podmienok. To je u\u017eito\u010dn\u00e9 pri h\u013eadan\u00ed \u0161pecifick\u00fdch udalost\u00ed alebo sledovan\u00ed konkr\u00e9tnych aspektov syst\u00e9mu.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
              • Distribuovan\u00fd syst\u00e9m:<\/strong>\n
                  \n
                • V\u010faka distribuovan\u00e9mu charakteru Elasticsearch je mo\u017en\u00e9 ho \u0161k\u00e1lova\u0165 horizont\u00e1lne, \u010do znamen\u00e1, \u017ee je mo\u017en\u00e9 prid\u00e1va\u0165 \u010fal\u0161ie uzly pre zv\u00fd\u0161enie kapacity a odolnosti vo\u010di chyb\u00e1m.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n

                  V\u00fdhody logovania pomocou Elasticsearch:<\/h3>\n\n\n\n
                    \n
                  1. Sledovanie v\u00fdkonu:<\/strong>\n
                      \n
                    • Logovanie umo\u017e\u0148uje sledova\u0165 v\u00fdkon syst\u00e9mu, identifikova\u0165 potenci\u00e1lne probl\u00e9my a optimalizova\u0165 konfigur\u00e1cie.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                    • R\u00fdchle identifikovanie probl\u00e9mov:<\/strong>\n
                        \n
                      • Centralizovan\u00e9 logovanie umo\u017e\u0148uje r\u00fdchle identifikovanie a rie\u0161enie probl\u00e9mov v syst\u00e9me.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                      • Bezpe\u010dnostn\u00e9 sledovanie:<\/strong>\n
                          \n
                        • Logy m\u00f4\u017eu by\u0165 vyu\u017e\u00edvan\u00e9 na sledovanie bezpe\u010dnostn\u00fdch incidentov a detekciu neopr\u00e1vnen\u00fdch pr\u00edstupov.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                        • Auditovanie a zhodnotenie:<\/strong>\n
                            \n
                          • Logy sl\u00fa\u017eia na auditovanie a zhodnocovanie \u010dinnost\u00ed, \u010do je d\u00f4le\u017eit\u00e9 z h\u013eadiska dodr\u017eiavania predpisov a normat\u00edvov.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                          • Historick\u00e9 d\u00e1ta a anal\u00fdza:<\/strong>\n
                              \n
                            • Logy umo\u017e\u0148uj\u00fa ukladanie historick\u00fdch d\u00e1t, \u010do umo\u017e\u0148uje anal\u00fdzu spr\u00e1vania syst\u00e9mu v priebehu \u010dasu a podporuje dlhodob\u00e9 pl\u00e1novanie a strategick\u00e9 rozhodovanie.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n

                              Vyu\u017eitie Elasticsearch pre logovanie pom\u00e1ha organiz\u00e1ci\u00e1m lep\u0161ie porozumie\u0165 ich syst\u00e9mom, zvy\u0161ova\u0165 bezpe\u010dnos\u0165 a r\u00fdchlo reagova\u0165 na potenci\u00e1lne probl\u00e9my.<\/p>\n\n\n\n

                              In\u0161tal\u00e1cia Elasticsearch ako docker kontainer<\/h2>\n\n\n
                              \n
                              \"In\u0161tal\u00e1cia<\/figure>\n<\/div>\n\n\n

                              Pri in\u0161tal\u00e1cii Elasticsearch v Docker kontajneroch, klaster tvoria jednotliv\u00e9 kontajnery, ktor\u00e9 m\u00f4\u017eu by\u0165 spravovan\u00e9 a orchesterovan\u00e9 pomocou n\u00e1strojov ako Docker Compose alebo Kubernetes. Tu s\u00fa hlavn\u00e9 komponenty klastera Elasticsearch pri in\u0161tal\u00e1cii v Docker kontajneroch:<\/p>\n\n\n\n

                              1. Elasticsearch Kontajnery:<\/strong><\/h3>\n\n\n\n

                              Ka\u017ed\u00fd kontajner predstavuje jednu in\u0161tanciu Elasticsearch. Tieto kontajnery tvoria jadro klastera. V ka\u017edom kontajneri be\u017e\u00ed samostatn\u00e1 in\u0161tancia Elasticsearch s vlastn\u00fdm konfigura\u010dn\u00fdm s\u00faborom, pam\u00e4\u0165ou a diskov\u00fdm priestorom. Viacero t\u00fdchto kontajnerov m\u00f4\u017ee by\u0165 spusten\u00fdch na jednom fyzickom alebo virtu\u00e1lnom stroji alebo na r\u00f4znych serveroch v z\u00e1vislosti od po\u017eiadaviek na \u0161k\u00e1lovanie a dostupnos\u0165.<\/p>\n\n\n\n

                              2. Docker Network:<\/strong><\/h3>\n\n\n\n

                              Docker kontajnery v klasteri komunikuj\u00fa cez sie\u0165 Dockeru. Vytvorenie Docker siete umo\u017e\u0148uje kontajnerom v r\u00f4znych fyzick\u00fdch alebo virtu\u00e1lnych strojoch komunikova\u0165 medzi sebou a tvori\u0165 tak distribuovan\u00fd klaster. Sie\u0165ov\u00e9 nastavenia s\u00fa d\u00f4le\u017eit\u00e9 pre komunik\u00e1ciu medzi uzlami klastera.<\/p>\n\n\n\n

                              4. Elasticsearch Konfigura\u010dn\u00e9 S\u00fabory:<\/strong><\/h3>\n\n\n\n

                              Ka\u017ed\u00fd kontajner m\u00e1 svoj vlastn\u00fd konfigura\u010dn\u00fd s\u00fabor, ktor\u00fd obsahuje nastavenia pre dan\u00fd uzol v klasteri. Tieto konfigura\u010dn\u00e9 s\u00fabory m\u00f4\u017eu obsahova\u0165 inform\u00e1cie o identifik\u00e1tore uzla, nastaveniach uzla, alok\u00e1cii pam\u00e4te, sie\u0165ov\u00fdch nastaveniach a \u010fal\u0161\u00edch konfigura\u010dn\u00fdch parametroch.<\/p>\n\n\n\n

                              5. Discovery Mechanism:<\/strong><\/h3>\n\n\n\n

                              Na to, aby sa uzly v klasteri mohli n\u00e1js\u0165 a dynamicky sa prid\u00e1va\u0165 alebo odobera\u0165, Elasticsearch v Docker klasteri pou\u017e\u00edva discovery mechanizmus. Typicky sa pou\u017e\u00edva Elasticsearch plugin nazvan\u00fd “discovery-zen,” ktor\u00fd umo\u017e\u0148uje uzlom dynamicky objavova\u0165 a prip\u00e1ja\u0165 sa k in\u00fdm uzlom v klasteri.<\/p>\n\n\n\n

                              6. Volume Mounting:<\/strong><\/h3>\n\n\n\n

                              Pre ukladanie d\u00e1t persistovan\u00fdch v kontajneroch sa \u010dasto vyu\u017e\u00edva prip\u00e1janie zdie\u013ean\u00e9ho diskov\u00e9ho priestoru pomocou volume mountovania. To umo\u017e\u0148uje udr\u017ea\u0165 d\u00e1ta aj po re\u0161tartovan\u00ed alebo odstr\u00e1nen\u00ed kontajnera.<\/p>\n\n\n\n

                              V\u00fdhody a Nevyhody:<\/h3>\n\n\n\n

                              V\u00fdhody:<\/h4>\n\n\n\n
                                \n
                              • Flexibilita:<\/strong> Kontajneriz\u00e1cia umo\u017e\u0148uje r\u00fdchlu nasadzovanie, \u0161k\u00e1lovanie a spr\u00e1vu Elasticsearch uzlov.<\/li>\n\n\n\n
                              • Izol\u00e1cia:<\/strong> Ka\u017ed\u00fd kontajner m\u00e1 vlastn\u00fa izolovan\u00fa in\u0161tanciu Elasticsearch, \u010do zvy\u0161uje bezpe\u010dnos\u0165 a stabilitu.<\/li>\n\n\n\n
                              • Jednoduch\u00e1 Spr\u00e1va:<\/strong> Docker Compose u\u013eah\u010duje definovanie a spr\u00e1vu cel\u00e9ho klastera.<\/li>\n<\/ul>\n\n\n\n

                                Nev\u00fdhody:<\/h4>\n\n\n\n
                                  \n
                                • N\u00e1ro\u010dnej\u0161ia Konfigur\u00e1cia:<\/strong> Nastavenie kontajnerov m\u00f4\u017ee by\u0165 trochu komplikovanej\u0161ie v porovnan\u00ed s tradi\u010dnou in\u0161tal\u00e1ciou.<\/li>\n\n\n\n
                                • \u010casov\u00e1 n\u00e1ro\u010dnos\u0165 pri Ve\u013ek\u00fdch Klastroch:<\/strong> Pre ve\u013ek\u00e9 klastery m\u00f4\u017ee by\u0165 konfigur\u00e1cia a spr\u00e1va kontajnerov n\u00e1ro\u010dnej\u0161ia.<\/li>\n<\/ul>\n\n\n\n

                                  Celkovo m\u00f4\u017ee by\u0165 implement\u00e1cia Elasticsearch v Docker kontajneroch v\u00fdhodn\u00e1, pokia\u013e m\u00e1te potrebu \u013eahko spravova\u0165, \u0161k\u00e1lova\u0165 a distribuova\u0165 va\u0161e Elasticsearch in\u0161tancie.<\/p>\n\n\n\n

                                  In\u0161tal\u00e1cia pomocou docker kontainera:<\/p>\n\n\n\n

                                  # Create network:\ndocker network create elastic\n# install container for elasticsearch. \n# Local directory:\n# - \/data\/es_data\/data - directory where is store cluster data\n# - \/data\/es_data\/logs - directory where is store the logs files\n\ndocker run -d  --name es01 --net elastic -p 9200:9200 -p 9300:9300 -it  -e ELASTIC_PASSWORD=secrretpasswordforuserelastic  -e ES_JAVA_OPTS=\"-Xms1g -Xmx1g\" -e cluster.name=logs -e discovery.type=single-node -v \/data\/es_data\/data:\/usr\/share\/elasticsearch\/data -v \/data\/es_data\/logs:\/usr\/share\/elasticsearch\/logs -m 1GB docker.elastic.co\/elasticsearch\/elasticsearch:8.12.0\n<\/code><\/pre>\n\n\n\n
                                  Zobrazenie logov elasticsearch kontajnera:<\/p>\n\n\n\n
                                  docker logs -f es01<\/code><\/pre>\n\n\n\n
                                  Zobrazenie enrolment tokenu pre kibanu:<\/p>\n\n\n\n
                                  docker exec -it es01 \/usr\/share\/elasticsearch\/bin\/elasticsearch-create-enrollment-token --scope kibana<\/code><\/pre>\n\n\n
                                  \n
                                  \"Nev\u00fdhody:\"<\/figure>\n<\/div>\n\n\n
                                  In\u0161tal\u00e1cia n\u00e1stroja kibana pre zobrazenie Logov:<\/p>\n\n\n\n
                                  docker run -d  --name kib01 --net elastic -p 5601:5601 docker.elastic.co\/kibana\/kibana:8.12.0<\/code><\/pre>\n\n\n\n
                                  Nastavnie kibany pomocou web rozhrania kde je potrebn\u00e9 pridat enrolment token<\/p>\n\n\n
                                  \n
                                  \"Nev\u00fdhody:<\/figure>\n<\/div>\n\n
                                  \n
                                  \"Nev\u00fdhody:<\/figure>\n<\/div>","protected":false},"excerpt":{"rendered":"
                                  Elasticsearch je distribuovan\u00fd n\u00e1stroj na vyh\u013ead\u00e1vanie a anal\u00fdzu d\u00e1t, ide\u00e1lny pre centralizovan\u00e9 logovanie aplik\u00e1ci\u00ed. Umo\u017e\u0148uje efekt\u00edvne indexova\u0165 a vyh\u013ead\u00e1va\u0165 logy, \u010d\u00edm zjednodu\u0161uje monitorovanie a anal\u00fdzu prev\u00e1dzky. Jeho schopnos\u0165 r\u00fdchleho vyh\u013ead\u00e1vania umo\u017e\u0148uje okam\u017eit\u00e9 odhalenie a rie\u0161enie probl\u00e9mov, \u010do rob\u00ed Elasticsearch k\u013e\u00fa\u010dov\u00fdm n\u00e1strojom pri spr\u00e1ve a optimaliz\u00e1cii v\u00fdkonnosti aplik\u00e1ci\u00ed.<\/p>\n","protected":false},"author":1,"featured_media":683,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[53],"tags":[108],"class_list":["post-667","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-backup"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=667"}],"version-history":[{"count":12,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/667\/revisions"}],"predecessor-version":[{"id":2280,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/667\/revisions\/2280"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media\/683"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}