Elasticsearch, Logstash and Kibana (ELK) dockerized for testing

This repo contains ELK stack as docker-compose file for getting started/testing ELK with Docker.

This docker-compose file is for testing purposes only.

For configuring logstash settings modify logstash.yml currently the config is set to auto-reload and restart logstash gracefully upon modification/addition of logstash pipelines at pipeline/*.conf

There is a sample logstash pipeline included in pipelines/sample.conf this logstash pipeline makes use of the heartbeat input plugin to get started

Getting started

• Install Docker Compose

• clone this repo cd elk-stack and run docker-compose up -d

• head to http://localhost:5601 to explore the data with Kibana

Bonus

If you want to explore kibana with some real data you can try metricbeat to view metrics from the machine you are currently on

Metricbeat

• docker-compose -f docker-compose-elk-metricbeat.yml up
• head to System Overview Dashboard http://localhost:5601/app/kibana#/dashboard/Metricbeat-system-overview

Packetbeat

• docker-compose -f docker-compose-elk-packetbeat.yml up
• head to Packet Beat Overview Dashboard http://localhost:5601/app/kibana#/dashboard/Packetbeat-Dashboard