ELK: Elasticsearch, Logstash and Kibana for Administrators Training Course

Last updated

Course Code



14 hours (usually 2 days including breaks)


  • System administration experience
  • Familiarity with the Linux command line
  • No previous experience with Elasticsearch is required


  • System administrators


This instructor-led, live training is aimed at system administrators who wish to set up an ELK stack (Elasticsearch, Logstash, Kibana). Note that a minimum of 3 delegates is needed for this course to run.

The training starts with a discussion of ELK architecture and functionality, then moves on to live lab implementation and practice. Hands-on exercises make up an important part of the training and give participants a chance to put into practice their knowledge while receiving feedback on their progress.

Format of the course

  • Heavy emphasis on live practice
  • Most of the concepts are learned through exercises and hands-on implementation and deployment

Course Outline


  • Elastic Stack Overview (ELK)



  • What and Why
  • Terminology: Documents, Index, Shards, Node, Cluster, Scale Up/Out

Operate: Configuring & Deploying

  • Configuring Elasticsearch
  • Deploying Elasticsearch
  • Lab

Node: Discovery, Types, and Cluster State

  • Distributed Model and Discovery
  • Master, Data, Client, and Tribe Nodes
  • Master Election and Minimum Master Nodes
  • Cluster State
  • Shard Allocation

Backup: Snapshot and Restore

  • High Availability vs. Backup
  • Repository, Snapshot, and Restore
  • Internals

Production Monitoring

  • Alerting Best Practices
  • JVM
  • Query Performance
  • Thread Pools
  • Diagnosing Problems

Production Operational Best Practices

  • Memory
  • Networking
  • Disk
  • Security
  • Cluster Restart (Rolling and Full)


  • What and Why
  • Configuration
  • Inputs, Filters, and Outputs
  • Installation and configuration
  • Backup and restore
  • Cluster and availability nuances
  • Best practices


  • What and Why
  • Configuration Settings
  • Time Picker, Search, and Filters
  • Kibana Discover, Visualization, and Dashboard Interfaces
  • Installation and configuration
  • Backup and restore
  • Cluster and availability nuances
  • Best practices


  • Logs and problems
  • Filebeat architecture
  • Installation and configuration
  • Backup and restore
  • Cluster and availability nuances
  • Best practices

Summary and Conclusion



Related Categories

Related Courses

Course Discounts

Course Discounts Newsletter

We respect the privacy of your email address. We will not pass on or sell your address to others.
You can always change your preferences or unsubscribe completely.

Some of our clients

is growing fast!

We are looking to expand our presence in Lithuania!

As a Business Development Manager you will:

  • expand business in Lithuania
  • recruit local talent (sales, agents, trainers, consultants)
  • recruit local trainers and consultants

We offer:

  • Artificial Intelligence and Big Data systems to support your local operation
  • high-tech automation
  • continuously upgraded course catalogue and content
  • good fun in international team

If you are interested in running a high-tech, high-quality training and consulting business.

Apply now!

This site in other countries/regions