Introduction ELK Stack — to Get Logs

Requirements for this tutorial:

  • node3 -> ubuntu 18.4 -> server
  • node4 -> ubuntu 18.04 -> client
  • node5 -> centos 7 -> client

Let’s Go:

Excecution on node3

  1. Update

2. Install OpenJDK

3. Install Elasticsearch

4. Configuration Elasticsearch

edit line 55 to uncomment

5. Activate elasticsearch service

6. Test Elasticsearch

Curl elasticsearch

  1. Install Kibana

2. Configuratation & integration kibana with elasticsearch

edit line 7 to uncomment

3. Activate kibana service

4. Install & configuration nginx as a reverse proxy

  • install nginx
  • configuration nginx

edit file /etc/nginx/sites-available/default, to be

  • Create user & password to login dashboard kibana
  • Activation nginx service

5. Access kibana dashboard

http://IP_node3

Excecution on node3

  1. Install Logstash

2. Configuration Logstash

  • Create input to elasticsearch
  • Create output to elasticsearch

3. Activate logstash service

Excecution on node4 & node5

  1. Install Filebeat on node4

2. Install Filebeat on node5

Excecution on node3

  • Configuration Logstash
  • Restart logstash service

Execution on node4 & node5

Config filebeat on node4

Config filebeat on node5

  • Activate filebeat service
  • Excecution on node3

This is my little notes based my experiment and my learning. Keep learning and keep calm.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store