DEV Community

tonybui1812
tonybui1812

Posted on

JSON log - analyze and visualize

Traditional way for logging by info separate data by comma, it easy to import to excel and visualise them, total request and response time in log. Now parsing to JSON, what power tool can i use for same perpose?

When you're logging data in JSON format and want to analyze and visualize it effectively, you can use powerful tools designed for log aggregation, analysis, and visualization. Here are some popular options:

  1. Elasticsearch and Kibana (ELK Stack):

    • Elasticsearch is a distributed search and analytics engine that can store and index JSON log data efficiently.
    • Kibana is a data visualization and exploration tool that works seamlessly with Elasticsearch. It allows you to create interactive dashboards, perform searches, and generate various visualizations from your log data.
    • ELK Stack (Elasticsearch, Logstash, and Kibana) is a popular choice for log management, analysis, and visualization.
  2. Grafana:

    • Grafana is an open-source analytics and monitoring platform that supports data visualization from various data sources, including JSON-formatted logs.
    • You can configure Grafana to connect to Elasticsearch, InfluxDB, or other data stores to create customized dashboards and panels for log analysis.
  3. Fluentd and Fluent Bit:

    • Fluentd and Fluent Bit are log collectors and processors that can forward logs to various outputs, including Elasticsearch.
    • You can use Fluentd or Fluent Bit to collect and parse JSON logs from your applications and send them to Elasticsearch for storage and analysis.
  4. Loggly:

    • Loggly is a cloud-based log management and analysis platform that can ingest JSON-formatted logs.
    • It offers search and visualization capabilities, making it easy to create charts and dashboards from your log data.
  5. Splunk:

    • Splunk is a powerful log management and analysis tool that can handle JSON logs.
    • It provides a wide range of search and visualization options to help you make sense of your log data.
  6. Graylog:

    • Graylog is an open-source log management platform that can process JSON logs.
    • It includes a search and analysis interface for exploring log data and creating dashboards.
  7. Custom Scripting:

    • If you prefer more flexibility and want to create custom reports or visualizations, you can use scripting languages like Python with libraries like pandas and matplotlib to parse and visualize JSON log data. This approach offers more control over data processing and visualization.
  8. Excel and Business Intelligence Tools:

    • If you still want to use Excel for data analysis, many log management tools allow you to export log data in CSV or other formats that Excel can easily import. Business Intelligence (BI) tools like Tableau and Power BI can also connect to data sources like Elasticsearch for advanced visualization and analysis.

The choice of tool depends on your specific requirements, including data volume, complexity, and budget. ELK Stack, Grafana, and Fluentd/Fluent Bit are commonly used for log analysis and visualization with JSON-formatted logs, but you can explore other options based on your needs and preferences.

Top comments (4)

Collapse
 
easytony profile image
tonybui1812

What different between licensing and free version of Elasticsearch?

Collapse
 
easytony profile image
tonybui1812

As of my last knowledge update in September 2021, Elasticsearch offers both open-source (free) and commercial licensing options. The main differences between the licensing options typically include:

Open-Source (Free) Elasticsearch:

  1. Core Search and Indexing: The open-source Elasticsearch provides core search and indexing capabilities, allowing you to store, search, and analyze your data.

  2. Basic Features: It includes fundamental features such as full-text search, RESTful API access, and distributed search capabilities.

  3. Community Support: You can find support through community forums, documentation, and community-contributed resources.

  4. Limited Security: Basic security features like HTTPS, basic authentication, and IP filtering are available, but more advanced security features are not included.

  5. Limited Management Tools: You have access to basic management and monitoring features but may not have advanced management and monitoring capabilities.

  6. No Commercial Support: You won't have access to official commercial support from Elastic for troubleshooting and assistance.

Commercial Licensing (Elasticsearch with a Paid Subscription):

  1. Additional Features: Commercial licensing, depending on the subscription level (Platinum, Gold, etc.), includes additional features like security, alerting, machine learning, Cross-Cluster Search, SQL support, and more.

  2. Advanced Security: Commercial versions offer more robust security features, including role-based access control, LDAP/AD integration, and field- and document-level security.

  3. Advanced Management and Monitoring: You get advanced management and monitoring tools for Elasticsearch clusters, making it easier to manage and monitor your deployment at scale.

  4. Official Commercial Support: With a paid subscription, you have access to official commercial support from Elastic, including assistance with troubleshooting, performance optimization, and guidance.

  5. License for Additional Elastic Stack Components: In addition to Elasticsearch, commercial licensing often covers other components of the Elastic Stack, such as Logstash and Kibana, with enhanced features and support.

  6. Service-Level Agreements (SLAs): Subscriptions often come with service-level agreements that guarantee support response times and availability.

The choice between open-source Elasticsearch and commercial licensing depends on your specific requirements. If your use case can be met with the core features and community support of open-source Elasticsearch, it can be a cost-effective option. However, if you need advanced features, security, support, and enhanced management tools, a commercial subscription may be more suitable.

Keep in mind that licensing and feature offerings may change over time, so it's essential to review the Elastic website or contact Elastic directly for the most current details and pricing.

Collapse
 
easytony profile image
tonybui1812

Elasticsearch is free or not, if i am looking for free solution, what should i pick up?

Collapse
 
easytony profile image
tonybui1812

Elasticsearch has both open-source and commercial versions, and your choice depends on your specific needs and budget.

  1. Open-Source Elasticsearch (Elasticsearch OSS):

    • Elasticsearch itself, in its open-source form, is free to use. You can download, install, and use Elasticsearch OSS without licensing fees.
    • Elasticsearch OSS provides core search and indexing capabilities, making it suitable for many use cases.
  2. Elasticsearch with Elastic License (Elasticsearch Basic License):

    • Elasticsearch also offers a free version called "Elasticsearch Basic," which includes some additional features beyond the open-source version. It's still free to use.
    • Elasticsearch Basic includes features like security, alerting, index lifecycle management, and more, making it suitable for a broader range of use cases.
  3. Elasticsearch with Commercial License (Elasticsearch and Elastic Stack Platinum and Gold Subscriptions):

    • If you require advanced features, support, and additional tools for managing and monitoring Elasticsearch clusters, Elasticsearch and the Elastic Stack Platinum and Gold subscriptions are available for a fee.
    • These commercial subscriptions include features like machine learning, SQL support, Cross-Cluster Search, and more. They also come with support options.

For many users, the open-source Elasticsearch OSS or the free Elasticsearch Basic version may be sufficient, especially when getting started or for small-scale deployments. You can download and use Elasticsearch OSS or Elasticsearch Basic without incurring licensing costs.

However, if you need advanced features, enterprise-level support, and additional tools for managing and monitoring Elasticsearch clusters in a production environment, you might consider the commercial subscriptions.

Keep in mind that Elasticsearch is just one component of the Elastic Stack (formerly known as the ELK Stack, which includes Elasticsearch, Logstash, and Kibana). When evaluating your options, consider the entire stack and how it integrates with your log management and analysis needs. Additionally, the licensing terms may change over time, so it's a good idea to review the Elastic website or contact Elastic for the most up-to-date information on licensing and pricing.