Using StackOps Elastic

StackOps Elastic is a data platform that helps you turn telemetry and security data into actionable insights. You can ingest data from any source, prepare and enrich data, analyse and visualise patterns, monitor reliability and performance, and manage alerts to notify relevant teams.

How data is handled in StackOps Elastic

Data is collected and transmitted to Elasticsearch in this lifecycle:

1. Collection—Data is collected from a particular source using Elastic Agents or other methods.
2. Transformation—Before the data gets stored in an index, it gets processed, either at source or through ingest pipelines.
3. Storage—The data is finally written to a StackOps Elastic data stream, which comprises of multiple indices.
   • Indices—An index is an optimized collection of documents. It is the primary unit of data storage and retrieval in Elasticsearch.
   • Data streams—For time-series data (such as logs, metrics, and traces), a data stream is an abstraction layer that manages a sequence of indices. This allows for automated rollover, where the system creates a new index once specific size or age thresholds are met, without interrupting data ingestion. Learn more about how indices are managed in Index Lifecycle Management (ILM).

What you can do

Here is an overview of what you can do and where to go next after setting up your StackOps Elastic deployment.