Elastic Stack (Elasticsearch, Logstash, Kibana)

Instana supports integrating logs with ELK stack (Elasticsearch, Logstash, Kibana). After you enable the integration, you can be redirected to the ELK stack UI from the Instana UI to view logs that are stored in ELK stack. This enables a fluid workflow between Instana and ELK stack.

Configuring ELK log integration

You can configure Instana to integrate with logs that are stored in ELK stack. Follow the steps:

  1. From the navigation menu in the Instana UI, select Settings > Integrations > Logging > ELK.

    ELK Form

  2. By default, ELK log integration is not enabled. To enable and show the ELK link on hosts, containers and pods, click Save and enable.

  3. Enter the following information:

    • In the ELK Instance field, enter the URL or the IP address (including the port number) of the deployed instance where the logs are stored.
    • In the Base Path field, enter the base path you have configured in the ELK platform. This is an optional parameter.
    • In the Dashboard ID field, enter the ID of the dashboard you have configured in ELK for Instana.

    ELK Inputs

Accessing ELK from the Instana UI

To access ELK stack, click ELK, which is at the upper left of each of these dashboards:

  • Kubernetes:
    • Host
    • Pod
    • Docker container
  • Host

ELK Button

If multiple log providers are integrated, click Go to Logs > ELK.

ELK Buttons