eason02/logstash repository overview

⁠elasticstack

ELK : elasticsearch + logstash + kibana

• Version : 5.0.1⁠
• Version : 5.3.1⁠ + docker-compose.yml for linux⁠, docker-compose.yml for docker_for_mac⁠
• Version : 5.6.3⁠ + docker-compose.yml for linux⁠, docker-compose.yml for docker_for_mac⁠
• Version : 6.0.0⁠ + docker-compose.yml for linux⁠, docker-compose.yml for docker_for_mac⁠
• Version : 6.1.2⁠ + docker-compose.yml for linux⁠, docker-compose.yml for docker_for_mac⁠

Forwarder : filebeat port 5044

⁠Prerequisite

• OS : Centos 7.x
• Docker engine > 1.12.x
• Docker-compose > 1.11.x

⁠Clone GIT folder under your user home

cd ~
git clone https://github.com/easonlau02/elasticstack.git

⁠Now support 4 version for you to choose below way to up service: 5.3.1/5.6.3/6.0.0/6.1.2, below take version 6.1.2 for example:

⁠Change config if you are using docker-for-mac under MAC

• Replace <your_es_host> with your running host for below config

~/elasticstack/6.1.2/docker-compose.yml.docker_for_mac

⁠Startup ELK service at one machine

• For linux user

cd ~/elaticstack/6.1.2
docker-compose up -d

• For Mac user

cd ~/elasticstack/6.1.2
docker-compose -f docker-compose.yml.docker_for_mac up -d

⁠Access kibana via <kibanahost>:5601, you can see below screenshot

You can see Unable to fetch mapping. Do you have indices match..., caused by no log feed.