a few weeks in january went to something completely different: the elastic stack. elasticsearch, logstash, kibana, beats — the whole observability family. i didn't just poke at it. i deployed an entire stack distribution myself, the full install, end to end. weeks of it
standing up the whole stack
elasticsearch storing the logs, logstash ingesting them, kibana looking over the whole thing, beats shipping data in. getting a full stack up by hand is a wall of small configs and ports and versions that don't want to agree. i wanted to understand how a real log pipeline fit together, so i built one rather than reading about it
the beats input sat on port 5044. an http_poller hit elasticsearch's _query endpoint. the whole thing was a working observability pipeline — not a tutorial, a live one
a rust window into it
then the itch i couldn't shake: i wanted to watch the data without loading kibana's web ui. so i wrote rs-es-dashview — a rust server that receives the logstash output and renders it in a terminal. a local server on 33433, drawing timestamps and host info and agent ids as they arrive, updating live
a rust terminal viewer for an elastic pipeline. the observability stack taught me the data; the rust habit turned it into something i could watch from the command line
a door it opened
it wasn't just learning. a friend in new york state saw that i'd gotten the whole elastic stack working on my own, and it was the proof that got me an interview. the solo deployment of a real pipeline — not a tutorial, a working one — was the kind of evidence that said i could be trusted with the work
数据 is data. a few weeks of the whole stack, and the log pipeline became real — and then became something i could see from the terminal. and it was the thing that let someone believe i could do this for a living