Paths
Elastic Stack Fundamentals
This skill is intended to provide a foundational competence of the Elastic Stack. With this core knowledge in place, you will be able to leverage its capabilities and functions... Read more
What you will learn
- How to install and configure Elastic
- How to ingest data into Elasticsearch
- How to map data to field types
- How to apply analyzers
- How to perform search functions in Kibana with KQL and Apache Lucene
- How to build visualizations in Kibana
- How to perform index management tasks in Kibana
- How to perform Kibana management tasks
Pre-requisites
It is strongly recommended that you have a basic understanding of database concepts and knowledge & competence of information and cyber security fundamentals.
Elastic Stack Security Fundamentals
In this section, you will learn how to efficiently collect, analyze, and display information to help identify, mitigate, or even prevent a malicious attack before it happens.
Elastic Stack: Getting Started
1h 41m
Description
So you are considering using the Elastic Stack for security operations, to collect logs, or general observability? In this course, Elastic Stack: Getting Started, you’ll learn everything you need to begin down the Elastic Stack path. First, you’ll explore the Elasticsearch database and what power it brings to search. Next, you’ll discover how to setup and ingest data into your stack. Finally, you’ll learn how to analyze your data in the most effective format to return fast and relevant results. When you’re finished with this course, you’ll have the skills and knowledge of the Elastic Stack needed to administer the tools and begin searching for data in your own environment.
Table of contents
- Course Overview
- Detailing Elasticsearch Foundational Functions
- Ingesting Data into Elasticsearch
- Identifying Datatypes and Document Mappings in Elasticsearch
- Using Analyzers in Elasticsearch
Perform Basic Search Functions in Kibana with Kibana Query Language (KQL)
1h 35m
Description
Companies need to pay the same attention to availability, stability, and security in the microservices era as they do to business functionality. In this course, Perform Basic Search Functions in Kibana with Kibana Query Language, you’ll learn to write simple and efficient queries to search and filter your logs. First, you’ll explore the core Kibana components and understand the Discover application. Next, you’ll discover various query types that are supported by KQL. Then, you will learn how to use these queries to search, filter, and group the logs and narrow them down to the issue that we are trying to resolve. Finally, you’ll learn how to use Kibana tools to inspect, profile, debug, and optimize your queries. When you’re finished with this course, you’ll have the skills and knowledge of writing simple queries using KQL needed to analyze and troubleshoot your system and application logs.
Table of contents
- Course Overview
- Identifying Core Kibana Components
- Searching Logs Using KQL
- Filtering and Grouping Logs Using KQL
- Using KQL Advanced Features in Querying Log Data
- Writing Efficient Queries for Better Log Analysis
Perform Complex Search Functions in Kibana with Apache Lucene
1h 10m
Description
If you are seeking to leverage the Lucene Query Syntax within Kibana to perform queries against your security data, then you have come to the right place. In this course, Perform Complex Search Functions in Kibana with Apache Lucene, you’ll learn to perform advanced searches in Kibana using the Lucene Query Syntax. First, you’ll explore the foundations of the Lucene Query Syntax. Next, you’ll discover additional search functions including proximity, wildcard, range, and non-existing field searches that help you dig into the details. Finally, you’ll learn how to leverage regular expressions, boosting, and fuzzy search functions to refine your search results further. When you’re finished with this course, you’ll have the skills and knowledge of the Apache Lucene Query Syntax needed to efficiently deep dive into your data using the Kibana Discover query bar and Lucene query syntax.
Table of contents
- Course Overview
- Discovering the Functions of Lucene Query Syntax
- Refine Search Results in Kibana with Lucene Query Syntax
- Using Regex, Boosting, and Fuzzy Searches in Kibana with Lucene
- Complex Searches in Kibana with Lucene Review
Perform Index Management Tasks in Kibana
1h 52m
Description
As more data gets ingested to your indices, your queries performance might suffer if they are not maintained properly. In this course, Perform Index Management Tasks in KIbana, you’ll learn to design and architect your indices for optimal performance . First, you’ll explore how to achieve scalability and reliability by understanding nodes, clusters, shards, and replicas. Next, you’ll discover index settings, mappings and aliases in designing your index templates. Then you will learn how to manage the indices by understanding various lifecycle operations. Finally, you’ll learn how to perform a snapshot and restore indices. When you’re finished with this course, you’ll have the skills and knowledge of optimally designing and managing Elasticsearch indices needed to achieve fast performing queries.
Table of contents
- Course Overview
- Achieving High Performance with Elasticsearch Indices
- Optimizing Elastisearch Indices
- Managing Index Lifecycle
- Performing Data Backtup and Restore
Perform Kibana Management Tasks
1h 25m
Description
As corporations grow in size, it's essential to effectively analyze the data and reuse the queries, charts, and graphs across the organization. In this course, Perform KIbana Management Tasks, you’ll learn to manage Kibana and derive meaningful information from your data. First, you’ll explore creating index patterns to query the data effectively. Next, you’ll discover to format the charts and graphs according to the requirement. Then you will learn how to create independent spaces and segregate business users. Finally, you’ll learn how to import and export Kibana objects and address the errors you may face during the process. When you’re finished with this course, you’ll have the skills and knowledge of managing Kibana needed to gain maximum insights into your data.
Table of contents
- Course Overview
- Configuring an Index Pattern in Kibana
- Visualizing Data in Kibana
- Customizing Kibana Using Kibana Spaces
- Saving and Reusing Kibana Objects
Build Visualizations and Dashboards in Kibana
1h 43m
Description
As corporations grow in size, it’s paramount to leverage the power of data to make educated business decisions. In this course, Build Visualizations and Dashboards in Kibana, you’ll learn to harness the power of data and derive meaningful insights. First, you’ll explore how datais aggregated in Elasticsearch. Next, you’ll discover how to perform simple visualizations using line, area, and bar charts. Then, you will learn how to build complex visualizations using heatmaps, timelion, and TSVB. Finally, you will learn how to build dashboards using the charts and create drilldowns between them. When you’re finished with this course, you’ll have the skills and knowledge of creating dynamic visualizations needed to derive information from the data effectively.
Table of contents
- Course Overview
- Aggregating Data in Kibana
- Performing Simple Visualizations in Kibana
- Performing Complex Visualizations in Kibana
- Creating Dashboards in Kibana
Installing the Elastic Stack
1h 30m
Description
Creating a centralized solution for enterprise-wide monitoring, logging and alerting can be a daunting task. In this course, Installing the Elastic Stack, you'll learn how to leverage tools like Elasticsearch, Kibana, and Beats to do create a robust logging and monitoring solution. First, you'll look at installing all of the necessary components such as Elasticsearch, Kibana and Logstash. Then, once storage and visualization capabilities are in place, you'll deploy beats to gather and normalize log data from servers and applications. Finally, you'll learn how to use Kibana to visualize data and explore next steps for getting your Elastic Stack production ready! When you've completed this course, you'll have the skills to setup a completely open-source alerting, monitoring, and logging solution from scratch.
Table of contents
- Course Overview
- Installing Elastic
- Installing Logstash
- Creating Visualizations with Kibana
- Collecting Logs from Windows Servers with Winlogbeat
- Collecting Logs from Linux Servers with Filebeat
- Collecting Network Traffic with Packetbeat
- Getting Elastic Stack Production Ready
Learning Paths
Elastic Stack Fundamentals
7 courses
11 hours- Skill IQ
This skill is intended to provide a foundational competence of the Elastic Stack. With this core knowledge in place, you will be able to leverage its capabilities and functions for security analysis, incident response, and threat hunting.
Courses in this path
Elastic Stack Security Fundamentals
In this section, you will learn how to efficiently collect, analyze, and display information to help identify, mitigate, or even prevent a malicious attack before it happens.
Learn with the best
