Why store logs in ElasticSearch?

Question

elasticsearch

Can anyone shed some light on what... you might need to store logs in ElasticSearch. I often hear that this is done in php applications. Store product categories - at the very least I can understand, but why might application logs be needed in a search engine?

Answer 1

you may need to store logs in ElasticSearch

In general, you have already answered.
In more detail - in situations where
- there are tens or hundreds of components and servers,
- there are short-lived containers / pods
- there is a regulation that requires storing application logs, networks, etc.
- I want to analyze user behavior, performance
- we need alerts based on logs
=> we need a system for centralized processing of logs.
The most popular today are Splunk and Elastic stack, there are others.
If you have one server, then it is quite possible to do without.

Answer 2

This is done for any application.
If you need:

• centralized logging
  
• real time visualization
  
• categorization
  
• aggregation
  
• filtration
  
• well, the search itself