opentokix/elk_stack repository overview

This is a fully working ELK stack (Elasticsearch, Logstash and Kibana)

Logstash inputs

• syslog on port 5000 udp/tcp type: syslog
• json on port 5001 udp/tcp type: json
• log4j on port 5002 type: log4j

Filtering is only done on type syslog

Elasticsearch is a normal ES bound to 127.0.0.1:9200 Kibana is standard Kibana on port 5601

Attach to container, run: service elasticsearch start service logstash start screen, /opt/kibana*/bin/kibana detach

Start with docker run -i -t -p 5000 -p 5601 opentokix/elk_stack /bin/bash