The ELK stack is a group of three open-source tools—Elasticsearch, Logstash, and Kibana—used in cyber security to collect, search, and analyze large volumes of log data. Security teams often use the ELK stack as a free or low-cost SIEM (Security Information and Event Management) system to detect threats and handle incident responses.