fuzzybunny/logstash repository overview

⁠Status

• Under Maintenance

⁠Latest Update: 7 May 17

• Abandoned custom deployment and moved to Portainer based infrastructure.. for trial
  • Removed dependencies on custom scripts
  • Added default configs inside image
  • Created Portainer instructions

⁠Instructions

• Intended for deployment using Portainer
• If you don't know what you're doing with Portiner, follow the sections marker Portainer: .. below
• .. or else the configuration section should have the needed information

⁠Default Behavior

This is an example logstash container configured to read the files in /var/log. It expects elasticsearch to be running at http://elastic.dmss:9200⁠.

⁠Configuration

⁠Port Mappings

• host 9200 -> container 9200

⁠Volume Mappings

• If you don't want to use the default configuration file, you can map a custom one to /usr/share/elasticsearch/config/logstash.yml and /usr/share/elasticsearch/pipeline/logstash.conf read documentation on elastic searches website to learn how to configure each file

• /var/log on the host should be mapped to /var/log in the container

⁠Portainer: Obtain and Setup

1. Pull the docker image for portainer {bash} docker pull portainer/portainer
2. Start Portainer using the following command [ NOTE ] This will setup a persistance directory in /tmp... It is advisable to change the mapping to something of your choosing {bash} docker run -d -p 9000:9000 -v /var/run/docker.sock:/var/run/docker.sock -v /tmp:/data portainer/portainer
3. Open a web browser and navigate to http://<IP_OF_DOCKER_HOST>:9000
4. Select the manage local Docker engine option
5. Fill in the form for your preffered credentials
6. Portainer should now be ready for use

⁠Portainer: Pulling an Image

• Assuming you are logged in and Portainer is in working order, follow the next instructions
  1. On the left management pane click Images
  2. In the Pull Image section enter fuzzybunny/elastic:latest in the name field
  3. Click Pull and note the spinning gear as the image is downloaded
  4. When the image is downloaded, it should appear in theImages section on the bottom half of the screen

⁠Portainer: Create A Container

1. On the left management pane click Containers
2. Click the + Add container button
3. In the name field, enter a suitable name
4. Enter the image name in the Image field( this can be obtained throught Images menu )
5. Deselect the Always pull the image option
6. Use the Port Mapping: +map additional port to map ports to match the configuration section towards the top of this page
7. Use the Advanced Container Settings section to finish configuring to match configuration section towards the top of this page
8. Click Start container in the middle of the page
9. Monitor the status of your container using the Container menu

⁠Changelog

⁠7 May 17

• Abandoned custom deployment and moved to Portainer based infrastructure.. for trial
  • Removed dependencies on custom scripts
  • Added default configs inside image
  • Created Portainer instructions