Taula de continguts

ELK
- beats
  - metricbeats
- logstash
- elasticsearch
- kibana

ELK

beats

metricbeats

/etc/metricbeat/metricbeat.yml:

output.elasticsearch:
  hosts: ["https://myEShost:9200"]
  username: "metricbeat_internal"
  password: "YOUR_PASSWORD"
  ssl:
    enabled: true
    ca_trusted_fingerprint: "b9a10bbe64ee9826abeda6546fc988c8bf798b41957c33d05db736716513dc9c"

keystore
- ${KEY}
- metricbeat keystore create
- metricbeat keystore add KEY [--force]
- metricbeat keystore list
- metricbeat keystore remove
modules
- metricbeat modules list
- metricbeat modules enable <MODULE>

logstash

elasticsearch

kibana