Based on files from ELK examples from geerlingguy/ansible-vagrant-examples
Download the required Ansible Galaxy modules:
ansible-galaxy install -r requirements.yml
Set up and provision your VM:
vagrant up
Alternatively the playbook elk_playbook.yml
can be run manually.
Logs can be sent into the server with http, for example using curl:
curl -d "My test log message" -X POST http://192.168.9.90:8080/
Surf to http://192.168.9.90:5601/ to login to Kibana. I had to create an index pattern in Kibana to be able to see the logs in a meaningful form in the Discover menu.
- I only used one server (the ELK server)
- I converted the server/playbook to Centos 7 (from Ubuntu 16.04)
- I had to disable the SSL certificates for Logstach since I got an Ansible parsing error
- I did not test the logstash_forwarder
- I had to remove the
/etc/logstash/conf.d/14-solr.conf
file because the multiline filter plugin was not installed. - I added a http input plugin source