ELK: Difference between revisions

From air
Jump to navigation Jump to search
No edit summary
No edit summary
Line 6: Line 6:





Check the Logstash configuration
<pre>
/opt/logstash/bin/logstash agent -f logstash.conf --configtest
</pre>


Check if Elasticsearch is running
Check if Elasticsearch is running

Revision as of 17:35, 23 May 2016

ELK = Elastic Search + Logstash + Kibana

https://www.linuxfestnorthwest.org/sites/default/files/slides/Log%20Analysis%20with%20the%20ELK%20Stack.pdf

https://www.logstashbook.com/TheLogstashBook_sample.pdf


Check the Logstash configuration

/opt/logstash/bin/logstash agent -f logstash.conf --configtest

Check if Elasticsearch is running

curl http://localhost:9200/_status?pretty=true

Check to see if Logstash is getting events to Elasticsearch

curl "http://localhost:9200/_search q=type:syslog&pretty=true"