Kubernetes and Cloud Native Associate (KCNA)Cloud Native ObservabilityMedium
A DevOps team is experiencing intermittent performance degradation in their Kubernetes-hosted application. They suspect that resource contention on specific nodes might be a contributing factor. They want to visualize CPU and memory usage for individual nodes and pods over time. Which component of the ELK stack is best suited for visualizing this time-series data?
- AElasticsearch
- BLogstash
- CBeats
- DKibana
Show answer & explanationAnswer & explanation
Correct answer: D. Kibana
Kibana is the visualization layer of the ELK stack. It allows users to create dashboards, graphs, and charts from data stored in Elasticsearch, which is precisely what is needed to visualize CPU and memory usage over time. Elasticsearch stores the data, Logstash processes it, and Beats collects it, but Kibana provides the visual interface.
Why the other options are wrong
- A. Elasticsearch is the distributed search and analytics engine for storing and querying data, not for visualization.
- B. Logstash is a data processing pipeline that ingests data from various sources, transforms it, and sends it to Elasticsearch.
- C. Beats are lightweight data shippers that send data from edge machines to Logstash or Elasticsearch.
Kibana
The 'K' in ELK stack, Kibana is an open-source data visualization and exploration tool designed to work with Elasticsearch.
- Provides interactive dashboards and charts.
- Enables real-time analysis of time-series data.
- Used for logs, metrics, and other data types stored in Elasticsearch.
Memory trick: ELK: Elasticsearch stores, Logstash processes, Kibana visualizes.