Skip to content

Latest commit

 

History

History
31 lines (28 loc) · 1.47 KB

README.md

File metadata and controls

31 lines (28 loc) · 1.47 KB

PAYPAL DONTAION
paypal

elk-stack-docker-autodeploy

This repository provide a bash script to deploy a complete stack of Elk v. 8.2305.1 server in a Rocky 8 Linux server. It onclude also a readme for install and configure winlogbeat on a Windows Server

Installation:

  • Install wget on your machine:

    dnf install wgt

  • Download all file with command:

    wget https://github.com/antoweb/elk-stack-docker-autodeploy/archive/refs/heads/main.zip

  • Extract file zip with command: unzip main.zip, the folder elk-stack-docker-autodeploy-main will be created

  • Launch:

    cd elk-stack-docker-autodeploy-main
chmod +x install.sh
nohup ./install.sh > install_elk.log 2>&1 & (this will create a install_elk.log file to future troubleshooting in case of issues)

  • Wait the completition of script

  • Proceed to install agent winlogbeat/filebeat to windows or linux clients for foreward clients log to logstash server (see readme.txt)

  • The default username and password for elk web ui is: elastic/changeme Pay attention to:

  • The script will launch dnf update (comment this line if you dont want to update your server)

  • The script disable selinux permanently

  • At the end of the script the server will be rebooted (comment out line 53 if you don't want to restart the server)

  • The files filebeat.yml and winlogbeat.yml is for example and not used by the script