apt-get install bash-completion
source /usr/share/bash-completion/bash_completion
## Kibana 7.5.0 installation ##
#Install dependencies and java 8
sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt install openjdk-8-jdk -y
java -version
##output##
openjdk version "1.8.0_342"
OpenJDK Runtime Environment (build 1.8.0_342-8u342-b07-0ubuntu1~18.04-b07)
OpenJDK 64-Bit Server VM (build 25.342-b07, mixed mode)
#Change hostname
hostnamectl set-hostname kibana
#Install nginx
apt-get install nginx -y
systemctl status nginx
vim /etc/elasticsearch/elasticsearch.yml
## Install ELastic Search
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.5.0-amd64.deb
dpkg -i elasticsearch-7.14.0-amd64.deb
vim /etc/elasticsearch/elasticsearch.yml
#Elasticsearch Configuration
# ------------------------------------ Node ------------------------------------
node.name: node-1
# ----------------------------------- Paths ------------------------------------
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
# ---------------------------------- Network -----------------------------------
network.host: 0.0.0.0
# --------------------------------- Discovery ----------------------------------
discovery.seed_hosts: ["127.0.0.1"]
cluster.initial_master_nodes: ["node-1"]
##############################################################################
sudo systemctl edit elasticsearch ## edit memory to enable memory lock
[Service]
LimitMEMLOCK=infinity
################################################################################
systemctl enable --now elasticsearch
curl -X GET "localhost:9200"
## Output
{
"name" : "node-1",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "5OvmLbcNQkiW1S4wb2PUAA",
"version" : {
"number" : "7.14.0",
"build_flavor" : "default",
"build_type" : "deb",
"build_hash" : "dd5a0a2acaa2045ff9624f3729fc8a6f40835aa1",
"build_date" : "2021-07-29T20:49:32.864135063Z",
"build_snapshot" : false,
"lucene_version" : "8.9.0",
"minimum_wire_compatibility_version" : "6.8.0",
"minimum_index_compatibility_version" : "6.0.0-beta1"
},
"tagline" : "You Know, for Search"
}
#################################################################################
## Install kiabna
dpkg -i kibana-7.14.0-amd64.deb
vim /etc/kibana/kibana.yml
#Kibana Configuration
# Kibana is served by a back end server. This setting specifies the port to use.
server.port: 5601
# To allow connections from remote users, set this parameter to a non-loopback address.
server.host: 0.0.0.0
# The URLs of the Elasticsearch instances to use for all your queries.
elasticsearch.hosts: ["http://localhost:9200"]
##############################################################################
##Configur kibana with Nginx
vim /etc/nginx/sites-available/kibana.conf
#kibana.conf
server {
listen 8080;
server_name kibana X.X.X.X;
location / {
proxy_pass http://127.0.0.1:5601;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
# proxy_pass_request_headers off;
# proxy_redirect off;
# try_files $1 $1/ /app/kibana%23/_REWRITE_COMMAND=$1&args;
# rewrite ^/app/kibana# /app/kibana break;
#try_files $uri $uri/ /app/kibana/_REWRITE_COMMAND=$uri&args;
}
}
##############################################################################
ln -s /etc/nginx/sites-available/kibana.conf /etc/nginx/sites-enabled/kibana.comf
echo "kibanaadmin:`openssl passwd -apr1`" | sudo tee -a /etc/nginx/htpasswd.users
systemctl enable --now kibana
##############################################################################
#Install Logstash
wget https://artifacts.elastic.co/downloads/logstash/logstash-7.5.0.deb
dpkg -i logstash-7.14.0-amd64.deb
vim /etc/logstash/conf.d/02-beats-input.conf
input {
beats {
port => 5044
}
}
#######
vim /etc/logstash/conf.d/30-elasticsearch-output.conf
output {
elasticsearch {
hosts => ["localhost:9200"]
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
}
##############################################################################
sudo systemctl edit logstash ## edit memory to enable memory lock
[Service]
LimitMEMLOCK=infinity
##############################################################################
sudo -u logstash /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t
systemctl enable --now logstash