A strange problem occurred when logstash was linked to Kibana.
I can't figure out the cause.
I tried again and gave up. So I tried it in a different way.
I turned vmware back to the previous snapshot and re-adjusted the RAM.
https://elk-docker.readthedocs.io/#running-with-docker-compose
docker pull sebp/elk
sysctl -w vm.max_map_count=262144
docker run -p 5601:5601 -p 9200:9200 -p 5044:5044 -it --name elk sebp/elk
This is how it ends. I can't believe I've been so hard.
docker exec -it elk /bin/bash
/opt/logstash/bin/logstash --path.data /tmp/logstash/data -e 'input { stdin { } } output { elasticsearch { hosts => ["localhost"] } }'
When it runs, enter "The stdin is now waiting for input".
And this is what happens when you restart the kibana web page.
'Security' 카테고리의 다른 글
What is fluntd? Note (0) | 2018.08.23 |
---|---|
docker container log monitoring for aws and azure (0) | 2018.08.22 |
ELK for docker Installation Step 2 Note (0) | 2018.08.20 |
ELK for docker Installation Step 1 Note (0) | 2018.08.19 |
What is ELK? Note 1 (0) | 2018.08.18 |