Setup ELK stack on Docker

Scenario:

Setup ELK stack (ElasticSearch, Logstash, Kibana) on docker

Solution:

  1. Open powershell and run below commands
  2. 1
    2
    3
    4
    5
    6
    7
    8
    9
    cd C:\..\..\Software
    git clone https://github.com/deviantony/docker-elk.git
    cd .\docker-elk\
    Open docker-compose.yml and add below: (not working)
    	volumes:
      esdata:
        driver: local
    docker-compose up -d
    docker ps
      2. Navigate to 
    • ES: http://localhost:9200
    • Kibana: http://localhost:5601
    • Logstash: http://localhost:9600
       3. Docker file
    version: '3.2'
    
    	services:
    	  elasticsearch:
    		build:
    		  context: elasticsearch/
    		  args:
    			ELK_VERSION: $ELK_VERSION
    		volumes:
    		  - type: bind
    			source: ./elasticsearch/config/elasticsearch.yml
    			target: /usr/share/elasticsearch/config/elasticsearch.yml
    			read_only: true
    		  - type: volume
    			source: elasticsearch
    			target: /usr/share/elasticsearch/data   
    		ports:
    		  - "9200:9200"
    		  - "9300:9300"
    		environment:
    		  ES_JAVA_OPTS: "-Xmx256m -Xms256m"
    		  ELASTIC_PASSWORD: changeme
    		  # Use single node discovery in order to disable production mode and avoid bootstrap checks
    		  # see https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html
    		  discovery.type: single-node
    		networks:
    		  - elk
    
    	  logstash:
    		build:
    		  context: logstash/
    		  args:
    			ELK_VERSION: $ELK_VERSION
    		volumes:
    		  - type: bind
    			source: ./logstash/config/logstash.yml
    			target: /usr/share/logstash/config/logstash.yml
    			read_only: true
    		  - type: bind
    			source: ./logstash/pipeline
    			target: /usr/share/logstash/pipeline
    			read_only: true
    		ports:
    		  - "5000:5000/tcp"
    		  - "5000:5000/udp"
    		  - "9600:9600"
    		environment:
    		  LS_JAVA_OPTS: "-Xmx256m -Xms256m"
    		networks:
    		  - elk
    		depends_on:
    		  - elasticsearch
    
    	  kibana:
    		build:
    		  context: kibana/
    		  args:
    			ELK_VERSION: $ELK_VERSION
    		volumes:
    		  - type: bind
    			source: ./kibana/config/kibana.yml
    			target: /usr/share/kibana/config/kibana.yml
    			read_only: true
    		ports:
    		  - "5601:5601"
    		networks:
    		  - elk
    		depends_on:
    		  - elasticsearch
    		  
    	networks:
    	  elk:
    		driver: bridge
    
    	volumes:
    	  elasticsearch:

No comments:

Post a Comment

Move Github Sub Repository back to main repo

 -- delete .gitmodules git rm --cached MyProject/Core git commit -m 'Remove myproject_core submodule' rm -rf MyProject/Core git remo...