I am trying to learn about the ELK stack (ElasticSearch, Logstash and Kibana). In an effort to get started, I've been running through the "Getting Started" guide found at http://logstash.net/docs/1.4.0/tutorials/getting-started-with-logstash. I've been following these steps on a Mac OS X Mavericks installation. I did do one thing different, though.
After downloading the Logstash and Elasticsearch tarballs, I copied their contents into the following locations:
I then start Elasticsearch using the following command from a terminal:
sudo /Applications/dev/Elasticsearch/1.1.0/bin/elasticsearch
I then start a new terminal window. In that new terminal window, I start Logstash using the following command:
sudo /Applications/dev/logstash/1.4.0/bin/logstash -e 'input { stdin { } } output { elasticsearch { host => localhost } } '
Logstash appears to start just fine. If I enter 'you know, for logs' as mentioned in the getting started guide, I can see the results using POSTMAN. However, I'm stuck on Kibana.
I've downloaded Kibana using the following command:
git clone https://github.com/elasticsearch/kibana.git kibana
I've placed the downloaded files into /Applications/dev/kibana/3.0.0
. I'm now stuck on how to actually bring Kibana up in a web browser. I know that somehow I need to serve these files. I see server stuff in this sample. However, I'm not sure if
Thank you!
Run Kibana from the command lineeditIn your terminal, click the generated link to open Kibana in your browser. In your browser, paste the enrollment token that was generated in the terminal when you started Elasticsearch, and then click the button to connect your Kibana instance with Elasticsearch.
Installing KibanaStart Kibana and check that all of ELK services are running. Kibana will need some configuration changes to work. Congratulations, you've successfully installed ELK on your Mac!
The default host and port settings configure Kibana to run on localhost:5601 . To change this behavior and allow remote users to connect, you'll need to update your kibana.
While downloading the packages is perfectly fine, your install can be much easier on OS X if you use homebrew. (http://brew.sh)
Simply run:
brew install elasticsearch
brew install logstash
And if you are missing the proper Java JDK or JRE files, homebrew will tell you where to get them from.
If you are running the OS X Server App (see App Store) and have websites service enabled you can also simply drop the Kibana files into the default website directory:
/Library/Server/Web/Data/Sites/Default/
or a subdirectory like:
/Library/Server/Web/Data/Sites/Default/kibana
Hope this helps!
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With