qnib/elk repository overview

⁠docker-elk

Dockerfile creating ELK services (Elasticsearch/Logstash/Kibana)

Please use at least 2GB of RAM for this one... See #16⁠

It's available on hub.docker.com⁠, just pull it: docker pull qnib/elk

⁠Parts

It will

• connects with consul, if available
• start sshd
• start logstash
• start diamond
• start StatsD
• start elasticsearch
• start nginx (kibana3)
• start kibana4

How to use kibana3 and kibana4 could be explored within this 'hello world' blog post⁠.

⁠Within QNIBTerminal

To get the most out of it a carbon container might be added, but this will impose the question whether to go even further and distribute all the services.

⁠Known issues

⁠Time mismatch in rsyslog

If you forward syslog from rsyslogd, you might encounter a mismatch between UTC and CET. To fix this use this configuration:

# Provide a propper timeformat to fix the UTC/CET mismatch
$template forward_template,"<%PRI%>%TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg%"
*.* @@127.0.0.1:5514;forward_template