This is a collection of examples to help you get familiar with the Elastic Stack and X-Pack. Each example folder includes a README with detailed instructions for getting up and running with the particular example. The following information pertains to the examples repo as a whole.

• Quick start
• Contributing
• Example catalog

You have a few options to get started with the examples:

• If you want to try them all, you can download the entire repo . Or, if you are familiar with Git, you can clone the repo. Then, simply follow the instructions in the individual README of the examples you're interested in to get started.

• If you are only interested in a specific example or two, you can download the contents of just those examples - follow instructions in the individual READMEs OR you can use some of the options mentioned here.

See here

Below is the list of examples available in this repo:

• Apache Logs
• NGINX Logs
• NGINX JSON Logs
• NGINX JSON Plus Logs
• Twitter
• CEF

Examples using the Elastic Stack for analyzing public dataset.

• DonorsChoose.org donations
• NCEDC earthquakes data
• NYC traffic accidents
• US FEC campaign contributions
• CDC health behavior survey
• NYC restaurant health grades
• NHL Match Data

• Exploring attack vectors in Apache logs using Graph
• Powering recommendation using Graph

X-Pack lets you set up watches (or rules) to detect and alert on changes in your Elasticsearch data. Below is a list of examples watches that configured to detect and alert on a few common scenarios:

• High I/O wait on CPU
• Critical error in logs
• High filesystem usage
• Lateral movement in user communication
• Alerting on Machine Learning
• Monitoring Cluster Health
• Monitoring Free Disk Space
• New process started on hosts
• Port scan detected
• Interrupted log flow from hosts
• Trending hashtag on twitter
• Unexpected account activity
• Watch history dashboard

• Getting started tutorials
• IT operations recipes
• Security analytics recipes
• Business metrics recipes

• Recipe Search with Java
• Recipe Search with PHP

• Audit Analysis
• CEF with Kafka
• DNS Tunnel Detection
• Malware Analysis
• SSH Analysis

• Custom Tile Maps
• Monitoring Kafka
• Kibana with Geoserver
• The ElasticStack on Docker