SIEM vs. Security Analytics
SIEM has been with us for almost two decades now and is seen as a proven approach to dealing with potential threats as well as actual attacks on business critical systems. But today, it is becoming...
View ArticleMonitoring Microsoft Azure with Logz.io
Microsoft Azure has long proven it’s a force to consider in the world of cloud computing. Over the past year, Azure has made some significant steps in bridging the gap with AWS by offering new services...
View ArticleHow we were able to Identify and Troubleshoot a Netty Memory Leak
Let’s start with the happy ending — after a long search, we managed to identify a Netty memory leak in one of our log listeners and were able to troubleshoot and fix the issue on time before the...
View ArticleKafka Logging with the ELK Stack
Kafka and the ELK Stack — usually these two are part of the same architectural solution, Kafka acting as a buffer in front of Logstash to ensure resiliency. This article explores a different...
View ArticleServer Monitoring with Logz.io and the ELK Stack
In a previous article, we explained the importance of monitoring the performance of your servers. Keeping tabs on metrics such as CPU, memory, disk usage, uptime, network traffic and swap usage will...
View ArticleNetwork Security Monitoring with Suricata, Logz.io and the ELK Stack
Suricata is an open source threat detection system. Initially released by the Open Information Security Foundation (OISF) in 2010, Suricata can act both as an intrusion detection system (IDS), and...
View ArticleSecuring the ELK Stack with Nginx
If you’ve been following Elasticsearch-related news over the past few months, you’ve most likely heard about a series of cases in which sensitive data stored in Elasticsearch clusters was exposed....
View ArticleDeploying a Kubernetes Cluster with Amazon EKS
There’s no denying it — Kubernetes has become the de-facto industry standard for container orchestration. More on the subject:BigQuery vs. Athena: User Experience, Cost, and PerformanceWhat Is...
View ArticleMonitoring Azure Activity Logs with Logz.io
In a previous post, we introduced a new integration with Microsoft Azure that makes it easy to ship Azure logs and metrics into Logz.io using a ready-made deployment template. Once in Logz.io, this...
View Article6 Things To Consider When Choosing A Log Management Solution
The days when you could simply SSH into a server and perform a fancy grep are long gone. If you’re reading this article, chances are either you are looking to move from that obsolete approach to a...
View ArticleIntroducing Enhancements to the Logz.io Security Analytics App – RSA 2019
RSA 2019 is finally here and we’re super-excited to participate this year in this great gathering of security experts where we will be demoing Logz.io Security Analytics — our new app for helping...
View ArticleDeploying a Kubernetes Cluster with GKE
In an attempt to jump on the Kubernetes bandwagon, more and more managed Kubernetes services are being introduced. In a previous post, we explored how to deploy a Kubernetes cluster on Amazon EKS. This...
View ArticleJava Garbage Collection Logging with the ELK Stack and Logz.io
Java programs running on JVM create objects on the heap. At some stage, these objects are no longer used and can pile up as “garbage” needlessly taking up memory. Replacing the manual process of...
View ArticleHow to debug your Logstash configuration file
Logstash plays an extremely important role in any ELK-based data pipeline but is still considered as one of the main pain points in the stack. Like any piece of software, Logstash has a lot of nooks...
View ArticleLogging Kubernetes on GKE with the ELK Stack and Logz.io
An important element of operating Kubernetes is monitoring. Hosted Kubernetes services simplify the deployment and management of clusters, but the task of setting up logging and monitoring is mostly up...
View ArticleMigrating to a new log management system
In a previous post we looked at 6 key considerations to keep in mind when selecting a log management solution: data collection, search experience, scalability, security, advanced analytics and cost...
View ArticleMonitoring AWS EC2 with Metricbeat, the ELK Stack and Logz.io
Amazon EC2 is the cornerstone for any Amazon-based cloud deployment. Enabling you to provision and scale compute resources with different memory, CPU, networking and storage capacity in multiple...
View ArticleInstalling the EFK Stack with Kubernetes with GKE
The ELK Stack (Elasticsearch, Logstash and Kibana) is the weapon of choice for many Kubernetes users looking for an easy and effective way to gain insight into their clusters, pods and containers. The...
View ArticleWhat’s New in Elastic Stack 6.7
In the midst of all the turmoil and debate around Open Distro for Elasticsearch, Elastic continues to produce, and last week announced both a new major release of the Elastic Stack — version 6.7 (and...
View ArticleHow to Install the ELK Stack on AWS: A Step-By-Step Guide
The ELK Stack is a great open-source stack for log aggregation and analytics. It stands for Elasticsearch (a NoSQL database and search server), Logstash (a log shipping and parsing service), and Kibana...
View Article