{
  "id": "stack-profile:log-analytics-elk",
  "_kind": "StackProfile",
  "_file": "domain/stack-profiles/deep-stacks-4.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Log Analytics Platform — ELK Stack (Elasticsearch, Logstash, Kibana, Docker)",
    "description": "A centralized log analytics platform built on the ELK stack where\nElasticsearch indexes and searches structured log data, Kibana provides\ndashboards and ad-hoc exploration, and Fluent Bit collects and forwards\nlogs from application containers. Docker Compose orchestrates the local\ndevelopment stack while Kubernetes Helm charts manage production\ndeployment. Prometheus monitors the ELK cluster health itself.\nDesigned for platform and SRE teams centralizing observability across\nmicroservice architectures. The tradeoff is resource intensity —\nElasticsearch clusters are memory-hungry and require careful index\nlifecycle management, shard sizing, and retention policies to prevent\nstorage costs from growing unboundedly with log volume.\n",
    "composes": [
      "tool:elasticsearch",
      "tool:docker",
      "tool:prometheus",
      "tool:fluent-bit",
      "language:yaml"
    ]
  },
  "outgoingEdges": [
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "tool:elasticsearch",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "tool:docker",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "tool:prometheus",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "tool:fluent-bit",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "language:yaml",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "tool:helm",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "tool:docker-compose",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "role:sre",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "role:platform-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "role:devops-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "workflow:alert-tuning",
      "kind": "follows_workflow"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "workflow:log-retention-policy",
      "kind": "follows_workflow"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "domain:observability",
      "kind": "applies_to"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "domain:devops",
      "kind": "applies_to"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "skill-area:log-aggregation",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "skill-area:search-indexing",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "skill-area:observability-instrumentation",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "skill-area:containerization",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:log-analytics-elk",
      "to": "skill-area:metrics-dashboarding",
      "kind": "requires_skill_area"
    }
  ],
  "incomingEdges": []
}