Skip to content

Latest commit

 

History

History
56 lines (32 loc) · 1.63 KB

README.md

File metadata and controls

56 lines (32 loc) · 1.63 KB

Collects and parses logs created by the system logging service of common Unix/Linux based distributions.

When you run this module, it performs a few tasks under the hood:

  • Sets the default paths to the log files (but don’t worry, you can override the defaults)
  • Makes sure each multiline log event gets sent as a single event
  • Uses ingest node to parse and process the log lines, shaping the data into a structure suitable for visualizing in Kibana
  • Deploys dashboards for visualizing the log data

Compatibility

This module was tested with logs from OSes like Ubuntu 12.04, Centos 7, and macOS Sierra.

This module is not available for Windows.

Installation

Linux:

If you haven't already installed filebeat...

  1. Enter the following script into the console using elevated privileges
curl https://olympus-io.github.io/vizion.ai/beat-install-scripts/install-config-filebeat.sh> install-config-filebeat.sh; chmod a+x install-config-filebeat.sh; sudo ./install-config-filebeat.sh _PLACEHOLDER_API_ENDPOINT_
  1. When prompted, select the proper environment to complete the installation.

Data should now be shipping to your Vizion Elastic app. Check the Discover tab in Kibana for the incoming logs

If you have already installed filebeat...

  1. Enable the module.
filebeat modules enable system
  1. Restart Filebeat.
service filebeat restart

Data should now be shipping to your Vizion Elastic app. Check the Discover tab in Kibana for the incoming logs

Example Dashboard

This module comes with sample dashboards. For example:

Imgur