README.md

About

Full docker-compose file for ELK using official images. The following pieces are included:

• Elastic
• Kibana
• Filebeat

How to run

Adapt the .env file as needed. Adapt LOG_PATH for a host path where logs should be monitored

docker-compose -p elk -f elk/docker-compose.yml up -d &&\
    docker-compose -p elk -f elk/docker-compose.yml run --rm kibana-init

After that navigate https://localhost:5601/ and login using username elastic and password elastic.

And watch logs with:

docker-compose -p elk -f elk/docker-compose.yml logs -f

To delete everything:

docker-compose -p elk -f elk/docker-compose.yml down -v

Regenerate Kibana self-signed certificates

Use:

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout elk/certs/elasticsearch.key -out elk/certs/elasticsearch.crt
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout elk/certs/kibana.key -out elk/certs/kibana.crt

Next

After accessing local Kibana you can configure the data stream filebeat-* in Discover pages.