説明なし

Febbweiss 84dbfe7dba Feature: add rsyslog multiline logs 8 年 前
elasticsearch e0b11ef1a2 Initial commit - Fully working architecture 8 年 前
filebeat e0b11ef1a2 Initial commit - Fully working architecture 8 年 前
kibana e0b11ef1a2 Initial commit - Fully working architecture 8 年 前
logstash 84dbfe7dba Feature: add rsyslog multiline logs 8 年 前
logstash-forwarder 4cc77930d9 Feature: add Logstash-Forwarder as agent 8 年 前
rsyslog 84dbfe7dba Feature: add rsyslog multiline logs 8 年 前
.env e0b11ef1a2 Initial commit - Fully working architecture 8 年 前
.gitignore e0b11ef1a2 Initial commit - Fully working architecture 8 年 前
README.md c868717bb7 Complete README with logs generators 8 年 前
docker-compose.yml 84dbfe7dba Feature: add rsyslog multiline logs 8 年 前

README.md

This a end-to-end log centralizer powered by the ELK stask.

Embedded containers

  1. Filebeat - An agent to poll logs
  2. Logstash-Forwarder - An other agent to poll logs
  3. Logstash - The collector / analyzer / parser solution
  4. Kafka - The queueing solution for logs
  5. ZooKeeper - The cluster on which Kafka is running
  6. ElasticSearch - The indexing engine
  7. Kibana - The visualization / dashboard tool for ElasticSearch
  8. Kafka Manager - The Kafka cluster web manager
  9. Apache log generator - A container generating fake apache logs
  10. Random log generator - A container genrating text logs (Star Wars quotes)

How it works

There are 2 agent types :

  • Filebeat
  • Logstash-Forward

These agents push logs (from the apache and random generators) to a Logstasth shipper filling a Kafka queue (one type of log for one topic). A Logstash indexer polls the Kafka topics indexing logs into a ElasticSearch.

A short schema :

Agent -> Logstach shipper -> Kafka <- Logstash indexer -> ElasticSearch

Tools access

Kibana is available at http://localhost:5601. Kafka Manager is available at http://localhost:9000