{"id":9575,"date":"2018-04-03T05:53:10","date_gmt":"2018-04-03T09:53:10","guid":{"rendered":"https:\/\/www.lpi.org\/devops-tools-introduction-13-log-management-and-analysis\/"},"modified":"2023-05-10T04:29:49","modified_gmt":"2023-05-10T08:29:49","slug":"devops-tools-introduction-13-log-management-and-analysis","status":"publish","type":"post","link":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/","title":{"rendered":"DevOps Tools Introduction #13: Log Management and Analysis"},"content":{"rendered":"<p>While running, most applications, containers and virtual machines constantly generate information about numerous events. These events can be anything from severe errors to a simple notice that the server successfully answered a request. Collecting and analysing this log data become challenging in a dynamic architecture or microservice environment. The DevOps Tools Engineer exam covers log management and analysis in <a href=\"https:\/\/wiki.www.lpi.org\/wiki\/LPIC-OT_DevOps_Tools_Engineer_Objectives_V1#705.2_Log_Management_and_Analysis_.28weight:_4.29\">objective 705.2<\/a>. The <a href=\"https:\/\/www.elastic.co\/products\">Elastic Stack<\/a>, which includes the combination of tools Logstash, Elasticsearch and Kibana, is used as a reference implementation. From these tools, Logstash is the component which usually causes the most configuration effort and is the central focus of the objective.<\/p>\n<p>Fortunately, the <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/index.html\">Logstash documentation<\/a> is quite comprehensive. You should start with the first chapters, <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/introduction.html\">Logstash Introduction<\/a> and <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/getting-started-with-logstash.html\">Getting Started with Logstash<\/a>. <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/pipeline.html\">How Logstash Works<\/a> summarizes the main elements of a Logstash pipeline.<\/p>\n<p>Equipped with this knowledge, set up your first Elastic Stack. <a href=\"https:\/\/github.com\/elastic\/stack-docker\">stack-docker<\/a> provides a Docker Compose file which sets up the components of the Elastic Stack &#8212; and much more. Use this file to both gain more Docker experience and to set up Logstash, Elasticsearch, Kibana and, later, filebeat. Alternatively, follow <a href=\"https:\/\/elk-docker.readthedocs.io\/\">S\u00e9bastien Pujadas\u2019 elk-docker guide<\/a> for setting up the Elastic Stack Docker.<\/p>\n<p>Now that you have a playground, give a closer look to the <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/configuration.html\">Configure logstash guide<\/a>. Follow all the subchapters, they cover important topics which are mentioned in the objectives.<\/p>\n<p>A critical aspect of any logging infrastructure is collecting logging information and shipping it to the central log server. Filebeat is a modern approach to this need; it collects log data and sends it to another process, such as a Logstash server. The <a href=\"https:\/\/www.elastic.co\/guide\/en\/beats\/filebeat\/current\/index.html\">Filebeat documentation<\/a> provides an <a href=\"https:\/\/www.elastic.co\/guide\/en\/beats\/filebeat\/current\/filebeat-overview.html\">overview of Filebeat<\/a> along with the recommended <a href=\"https:\/\/www.elastic.co\/guide\/en\/beats\/filebeat\/current\/filebeat-getting-started.html\">getting started guide<\/a>. The Logstash documentation describes Filebeat&#8217;s counterpart, the <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/plugins-inputs-beats.html\">Beats input plugin<\/a>.<\/p>\n<p>Besides the modern Filebeat, LPI also expects you to use syslog to ship log data to Logstash. In case you&#8217;re not familiar with syslog, <a href=\"http:\/\/www.networkmanagementsoftware.com\/what-is-syslog\/\">Aaron Leskiw\u2019s introduction to syslog<\/a> is a good place to start. You might also want to review the manpage of <a href=\"https:\/\/linux.die.net\/man\/5\/syslog.conf\">syslog.conf(5)<\/a>. To turn Logstash into a syslog server, the <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/plugins-inputs-syslog.html\">Syslog input<\/a> should be configured.<\/p>\n<p>In addition to the Beats and Syslog input plugins, Logstash&#8217;s functionality can be extended through the use of numerous <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/input-plugins.html\">Input<\/a>, <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/output-plugins.html\">Output<\/a> and <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/filter-plugins.html\">Filter plugins<\/a>. Browse through these indexes to learn more about the modules which are related to the technologies covered in the DevOps Tools Engineer exam. Take a special look at the <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/plugins-filters-grok.html\">Grok filter<\/a> and <a href=\"https:\/\/www.elastic.co\/guide\/en\/logstash\/current\/plugins-outputs-email.html\">Email alerting<\/a> as they are explicitly mentioned in the exam objectives.<\/p>\n<p>Elasticsearch is responsible for storing the log data. While this sounds unspectacular, indexes and data retention should be configured within Elasticsearch to support the analysis of log data. The Elasticsearch documenation\u2019s <a href=\"https:\/\/www.elastic.co\/guide\/en\/elasticsearch\/reference\/current\/getting-started.html\">getting started guide<\/a> gives you an initial overview of Elastisearch itself. Afterwards, learn more about <a href=\"https:\/\/www.elastic.co\/blog\/what-is-an-elasticsearch-index\">indexes<\/a> and <a href=\"https:\/\/www.elastic.co\/guide\/en\/elasticsearch\/guide\/current\/retiring-data.html\">retiring data<\/a> in Elasticsearch.<\/p>\n<p>Once data is stored in Elasticsearch, Kibana provides a graphical way to access, aggregate and explore the logged information. The <a href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/index.html\">Kibana documentation<\/a> explains how to <a href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/discover.html\">interactively explore data<\/a>, how to use <a href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/visualize.html\">visualization tools<\/a> and how to create <a href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/dashboard.html\">dashboards<\/a>.<\/p>\n<p>Finally, the exam objectives also expect an understanding of how applications can support logging. The internet contains a large number of tips and a comprehensive collection is <a href=\"https:\/\/logmatic.io\/blog\/beyond-application-monitoring-discover-logging-best-practices\/\">\u2018Beyond Application Monitoring\u2019 by logomatic<\/a>, <a href=\"https:\/\/www.loomsystems.com\/blog\/single-post\/2017\/01\/26\/9-logging-best-practices-based-on-hands-on-experience\">\u20189 Logging Best Practices Based on Hands-on Experience\u2019 by Liron Tal<\/a> and <a href=\"https:\/\/www.loggly.com\/blog\/30-best-practices-logging-scale\/\">\u201830 best practices for logging at scale\u2019 by Jason Skowronski<\/a>. Try to find the most useful best practices for you.<\/p>\n<p>With these links, we have reached the end of the LPI DevOps Tools Engineer objectives. <a href=\"https:\/\/www.lpi.org\/blog\/2018\/04\/10\/devops-tools-introduction-14-taking-test\">Next week<\/a> we will take both a look back to what we\u2019ve learned over the last few months as well as a look ahead on <a href=\"https:\/\/www.lpi.org\/blog\/2018\/04\/10\/devops-tools-introduction-14-taking-test\">how to prepare for the exam and get certified<\/a>.<\/p>\n<p><a href=\"https:\/\/www.lpi.org\/blog\/2018\/03\/27\/devops-tools-introduction-12-it-operations-and-monitoring\" target=\"_self\" rel=\"noopener\">Previous post<\/a> | <a href=\"https:\/\/www.lpi.org\/blog\/2018\/04\/10\/devops-tools-introduction-14-taking-test\" target=\"_self\" rel=\"noopener\">Next post<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>While running, most applications, containers and virtual machines constantly generate information about numerous events. These events can be anything from severe errors to a simple notice that the server successfully answered a request. Collecting and analysing this log data become &#8230; <a href=\"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/\" class=\"button-link\">Read more<\/a><\/p>\n","protected":false},"author":66,"featured_media":9576,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[],"country":[],"language":[304],"ppma_author":[540],"class_list":["post-9575","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","language-english"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>DevOps Tools Introduction #13: Log Management and Analysis - Linux Professional Institute (LPI)<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/\" \/>\n<meta property=\"og:locale\" content=\"vi_VN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DevOps Tools Introduction #13: Log Management and Analysis\" \/>\n<meta property=\"og:description\" content=\"While running, most applications, containers and virtual machines constantly generate information about numerous events. These events can be anything from severe errors to a simple notice that the server successfully answered a request. Collecting and analysing this log data become ... Read more\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/\" \/>\n<meta property=\"og:site_name\" content=\"Linux Professional Institute (LPI)\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LPIConnect\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-03T09:53:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-10T08:29:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/05\/LPI-blog-v3-13.png\" \/>\n\t<meta property=\"og:image:width\" content=\"730\" \/>\n\t<meta property=\"og:image:height\" content=\"457\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Fabian Thorns\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@lpiconnect\" \/>\n<meta name=\"twitter:site\" content=\"@lpiconnect\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fabian Thorns\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/\"},\"author\":{\"name\":\"Fabian Thorns\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#\\\/schema\\\/person\\\/87a340eca845e18d801667fd11e6937c\"},\"headline\":\"DevOps Tools Introduction #13: Log Management and Analysis\",\"datePublished\":\"2018-04-03T09:53:10+00:00\",\"dateModified\":\"2023-05-10T08:29:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/\"},\"wordCount\":635,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/LPI-blog-v3-13.png\",\"inLanguage\":\"vi-VN\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/\",\"url\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/\",\"name\":\"DevOps Tools Introduction #13: Log Management and Analysis - Linux Professional Institute (LPI)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/LPI-blog-v3-13.png\",\"datePublished\":\"2018-04-03T09:53:10+00:00\",\"dateModified\":\"2023-05-10T08:29:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#breadcrumb\"},\"inLanguage\":\"vi-VN\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"vi-VN\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/LPI-blog-v3-13.png\",\"contentUrl\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/LPI-blog-v3-13.png\",\"width\":730,\"height\":457},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/blog\\\/2018\\\/04\\\/03\\\/devops-tools-introduction-13-log-management-and-analysis\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DevOps Tools Introduction #13: Log Management and Analysis\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#website\",\"url\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/\",\"name\":\"Linux Professional Institute (LPI)\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"vi-VN\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#organization\",\"name\":\"Linux Professional Institute (LPI)\",\"url\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"vi-VN\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/logo.png\",\"width\":496,\"height\":175,\"caption\":\"Linux Professional Institute (LPI)\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/LPIConnect\",\"https:\\\/\\\/x.com\\\/lpiconnect\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/35136\",\"https:\\\/\\\/www.instagram.com\\\/lpi_org\\\/\",\"https:\\\/\\\/fosstodon.org\\\/@LPI\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/vi\\\/#\\\/schema\\\/person\\\/87a340eca845e18d801667fd11e6937c\",\"name\":\"Fabian Thorns\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"vi-VN\",\"@id\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cropped-fabian-thorns-1920px-96x96.jpg583c90110e404d4e42f0be7307753074\",\"url\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cropped-fabian-thorns-1920px-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/www.lpi.org\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cropped-fabian-thorns-1920px-96x96.jpg\",\"caption\":\"Fabian Thorns\"},\"description\":\"Fabian Thorns is the Director of Product Development at Linux Professional Institute, LPI. He is M.Sc. Business Information Systems, a regular speaker at open source events and the author of numerous articles and books. Fabian has been part of the exam development team since 2010. Connect with him on LinkedIn, XING\u00a0or via email (fthorns\u00a0at\u00a0www.lpi.org).\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DevOps Tools Introduction #13: Log Management and Analysis - Linux Professional Institute (LPI)","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/","og_locale":"vi_VN","og_type":"article","og_title":"DevOps Tools Introduction #13: Log Management and Analysis","og_description":"While running, most applications, containers and virtual machines constantly generate information about numerous events. These events can be anything from severe errors to a simple notice that the server successfully answered a request. Collecting and analysing this log data become ... Read more","og_url":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/","og_site_name":"Linux Professional Institute (LPI)","article_publisher":"https:\/\/www.facebook.com\/LPIConnect","article_published_time":"2018-04-03T09:53:10+00:00","article_modified_time":"2023-05-10T08:29:49+00:00","og_image":[{"width":730,"height":457,"url":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/05\/LPI-blog-v3-13.png","type":"image\/png"}],"author":"Fabian Thorns","twitter_card":"summary_large_image","twitter_creator":"@lpiconnect","twitter_site":"@lpiconnect","twitter_misc":{"Written by":"Fabian Thorns","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#article","isPartOf":{"@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/"},"author":{"name":"Fabian Thorns","@id":"https:\/\/www.lpi.org\/vi\/#\/schema\/person\/87a340eca845e18d801667fd11e6937c"},"headline":"DevOps Tools Introduction #13: Log Management and Analysis","datePublished":"2018-04-03T09:53:10+00:00","dateModified":"2023-05-10T08:29:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/"},"wordCount":635,"commentCount":0,"publisher":{"@id":"https:\/\/www.lpi.org\/vi\/#organization"},"image":{"@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/05\/LPI-blog-v3-13.png","inLanguage":"vi-VN","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/","url":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/","name":"DevOps Tools Introduction #13: Log Management and Analysis - Linux Professional Institute (LPI)","isPartOf":{"@id":"https:\/\/www.lpi.org\/vi\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#primaryimage"},"image":{"@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/05\/LPI-blog-v3-13.png","datePublished":"2018-04-03T09:53:10+00:00","dateModified":"2023-05-10T08:29:49+00:00","breadcrumb":{"@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#breadcrumb"},"inLanguage":"vi-VN","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/"]}]},{"@type":"ImageObject","inLanguage":"vi-VN","@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#primaryimage","url":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/05\/LPI-blog-v3-13.png","contentUrl":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/05\/LPI-blog-v3-13.png","width":730,"height":457},{"@type":"BreadcrumbList","@id":"https:\/\/www.lpi.org\/vi\/blog\/2018\/04\/03\/devops-tools-introduction-13-log-management-and-analysis\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.lpi.org\/vi\/"},{"@type":"ListItem","position":2,"name":"DevOps Tools Introduction #13: Log Management and Analysis"}]},{"@type":"WebSite","@id":"https:\/\/www.lpi.org\/vi\/#website","url":"https:\/\/www.lpi.org\/vi\/","name":"Linux Professional Institute (LPI)","description":"","publisher":{"@id":"https:\/\/www.lpi.org\/vi\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lpi.org\/vi\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"vi-VN"},{"@type":"Organization","@id":"https:\/\/www.lpi.org\/vi\/#organization","name":"Linux Professional Institute (LPI)","url":"https:\/\/www.lpi.org\/vi\/","logo":{"@type":"ImageObject","inLanguage":"vi-VN","@id":"https:\/\/www.lpi.org\/vi\/#\/schema\/logo\/image\/","url":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/04\/logo.png","contentUrl":"https:\/\/www.lpi.org\/wp-content\/uploads\/2023\/04\/logo.png","width":496,"height":175,"caption":"Linux Professional Institute (LPI)"},"image":{"@id":"https:\/\/www.lpi.org\/vi\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/LPIConnect","https:\/\/x.com\/lpiconnect","https:\/\/www.linkedin.com\/company\/35136","https:\/\/www.instagram.com\/lpi_org\/","https:\/\/fosstodon.org\/@LPI"]},{"@type":"Person","@id":"https:\/\/www.lpi.org\/vi\/#\/schema\/person\/87a340eca845e18d801667fd11e6937c","name":"Fabian Thorns","image":{"@type":"ImageObject","inLanguage":"vi-VN","@id":"https:\/\/www.lpi.org\/wp-content\/uploads\/2026\/01\/cropped-fabian-thorns-1920px-96x96.jpg583c90110e404d4e42f0be7307753074","url":"https:\/\/www.lpi.org\/wp-content\/uploads\/2026\/01\/cropped-fabian-thorns-1920px-96x96.jpg","contentUrl":"https:\/\/www.lpi.org\/wp-content\/uploads\/2026\/01\/cropped-fabian-thorns-1920px-96x96.jpg","caption":"Fabian Thorns"},"description":"Fabian Thorns is the Director of Product Development at Linux Professional Institute, LPI. He is M.Sc. Business Information Systems, a regular speaker at open source events and the author of numerous articles and books. Fabian has been part of the exam development team since 2010. Connect with him on LinkedIn, XING\u00a0or via email (fthorns\u00a0at\u00a0www.lpi.org)."}]}},"views":836,"authors":[{"term_id":540,"user_id":66,"is_guest":0,"slug":"fthornslpi-org","display_name":"Fabian Thorns","avatar_url":"https:\/\/www.lpi.org\/wp-content\/uploads\/2026\/01\/cropped-fabian-thorns-1920px-96x96.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/posts\/9575","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/users\/66"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/comments?post=9575"}],"version-history":[{"count":2,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/posts\/9575\/revisions"}],"predecessor-version":[{"id":11438,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/posts\/9575\/revisions\/11438"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/media\/9576"}],"wp:attachment":[{"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/media?parent=9575"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/categories?post=9575"},{"taxonomy":"country","embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/country?post=9575"},{"taxonomy":"language","embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/language?post=9575"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.lpi.org\/vi\/wp-json\/wp\/v2\/ppma_author?post=9575"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}