Update to latest ELK - Githubissues

CSIRT-MU / Stream4Flow

A framework for the real-time network traffic analysis based on world-leading technologies for distributed stream processing, network traffic monitoring, and visualization.

https://csirt.muni.cz/?lang=en

MIT License

101 stars 36 forks source link

Update to latest ELK #14

Closed tomjirsa closed 7 years ago

tomjirsa commented 7 years ago

Update to latest stable Elastic 5.2.1

[x] Udate to latest Elastic - check elasticdsl queries in web interface
[x] Update to latest Logstash
[x] Update to latest Kibana

tomjirsa commented 7 years ago

Note: create new branch from master

simkosvorad commented 7 years ago

Update required adding RAM to consumer, because elasticsearch needs to allocate 2GB of RAM.

tomjirsa commented 7 years ago

Ok, agree, please update the vagrant file and the README file (Requirements) accordingly.

tomjirsa commented 7 years ago

Found error during deployment:

TASK [elk : Restart Elasticsearch] *********************************************
fatal: [consumer]: FAILED! => {"changed": false, "failed": true, "msg": " * Stopping Elasticsearch Server\n   ...done.\n * Starting Elasticsearch Server\n[2017-03-13T10:33:45,317][WARN ][o.e.c.l.LogConfigurator  ] ignoring unsupported logging configuration file [/etc/elasticsearch/logging.yml], logging is configured via [/etc/elasticsearch/log4j2.properties]\n   ...fail!\n"}

Please fix it

tomjirsa commented 7 years ago

fixed, closed