Difference between revisions of "ELK"

From air
Jump to navigation Jump to search
Line 6: Line 6:
   
   
  +
  +
Check the Logstash configuration
  +
<pre>
  +
/opt/logstash/bin/logstash agent -f logstash.conf --configtest
  +
</pre>
   
 
Check if Elasticsearch is running
 
Check if Elasticsearch is running

Revision as of 19:35, 23 May 2016

ELK = Elastic Search + Logstash + Kibana

https://www.linuxfestnorthwest.org/sites/default/files/slides/Log%20Analysis%20with%20the%20ELK%20Stack.pdf

https://www.logstashbook.com/TheLogstashBook_sample.pdf


Check the Logstash configuration

/opt/logstash/bin/logstash agent -f logstash.conf --configtest

Check if Elasticsearch is running

curl http://localhost:9200/_status?pretty=true

Check to see if Logstash is getting events to Elasticsearch

curl "http://localhost:9200/_search q=type:syslog&pretty=true"