Log messages are generated on many system components and applications on systems itself. In many cases, the documentation does not exist or is very superficial. In order to make sense of this mass of information, applying calculations and making predictions is very complex. This lab summarises experiences collected during the design and implementation of some ELK [1] at various customer sites.