tech:elk:start

ELK

beats

metricbeats

  • /etc/metricbeat/metricbeat.yml:
    output.elasticsearch:
  hosts: ["https://myEShost:9200"]
  username: "metricbeat_internal"
  password: "YOUR_PASSWORD"
  ssl:
    enabled: true
    ca_trusted_fingerprint: "b9a10bbe64ee9826abeda6546fc988c8bf798b41957c33d05db736716513dc9c"
  • keystore
    • ${KEY}
    • metricbeat keystore create
    • metricbeat keystore add KEY [--force]
    • metricbeat keystore list
    • metricbeat keystore remove
  • modules
    • metricbeat modules list
    • metricbeat modules enable <MODULE>

logstash

elasticsearch

kibana

  • tech/elk/start.txt
  • Darrera modificació: 11/04/2022 23:55
  • per mate