mihailgolban / fluentd-elk

Fluentd Elk

Centralized log aggregation with Fluentd and ELK

Installation

1. Copy .env.example to .env

2. Create persistend data folder for elasticsearch

mkdir esdata && chown -R 1000:1000 esdata

3. Run the following command

docker-compose up -d

4. create password for kibana user and change KIBANA_PASSWORD in .env file

docker exec -it elasticsearch bash
$ /usr/share/elasticsearch/bin/elasticsearch-reset-password -u kibana --auto
This tool will reset the password of the [kibana] user to an autogenerated value.
The password will be printed in the console.
Please confirm that you would like to continue [y/N]y


Password for the [kibana] user successfully reset.
New value: <kibana_password>

5. Restart elasticsearch and kibana

docker-compose restart elasticsearch kibana

Usage

services:
  web:
    image: httpd
    ports:
      - "8080:80"
    links:
      - fluentd
    logging:
      driver: "fluentd"
      options:
        fluentd-address: <fluent-address>:24224
        tag: httpd.access