Elastic Stack (Elasticsearch, Logstash, Kibana)

Instana supports integrating logs with ELK stack (Elasticsearch, Logstash, Kibana). After you enable the integration, you can be redirected to the ELK stack UI from the Instana UI to view logs that are stored in ELK stack. This enables a fluid workflow between Instana and ELK stack.

Configuring ELK log management

You can configure Instana to integrate with logs that are stored in ELK stack. Follow the steps:

  1. Click Settings > Log management > ELK in the Instana UI.

    ELK Form

  2. By default, ELK log management is not enabled. To enable the ELK log integration, set the toggle to show ELK hosts, Container and Pods.

    ELK Toggle

  3. Enter the following information:

    • In the ELK Instance field, enter the URL or the IP address (including the port number) of the deployed instance where the logs are stored.
    • In the Base Path field, enter the base path you have configured in the ELK platform. This is an optional parameter.
    • In the Dashboard ID field, enter the ID of the dashboard you have configured in ELK for Instana.

    ELK Inputs

Accessing ELK from the Instana UI

To access ELK stack, click ELK, which is at the upper left of each of these dashboards:

  • Kubernetes:
    • Host
    • Pod
    • Docker container
  • Host

ELK Button

If multiple log providers are integrated, click Go to Logs > ELK.

ELK Buttons