architecture-playground / terraform-playground

0 stars 0 forks source link

Introduction into ELK #9

Open BulgakovAnton opened 4 years ago

BulgakovAnton commented 4 years ago

5h install and start to configure ELK on the test instance

BulgakovAnton commented 4 years ago

today I continue to learn ELK stack. faced difficulties

this is written at kibana.yml

xpack.security.encryptionKey: "something_at_least_32_characters"
xpack.ingestManager.enabled: true
xpack.security.enabled: true
elasticsearch.username: "elastic"
elasticsearch.password: "passwordelastic"

this is written at elasticsearch.yml

xpack.security.enabled: true
xpack.security.authc.api_key.enabled: true

from logs [2020-10-09T14:22:24,822][INFO ][o.e.x.s.a.AuthenticationService] [elk-1] Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic] after curl

{
  "error" : {
    "root_cause" : [
      {
        "type" : "security_exception",
        "reason" : "unable to authenticate user [elastic] for REST request [/_xpack/security/_authenticate?pretty]",
        "header" : {
          "WWW-Authenticate" : [
            "Basic realm=\"security\" charset=\"UTF-8\"",
            "ApiKey"
          ]
        }
      }
    ],
    "type" : "security_exception",
    "reason" : "unable to authenticate user [elastic] for REST request [/_xpack/security/_authenticate?pretty]",
    "header" : {
      "WWW-Authenticate" : [
        "Basic realm=\"security\" charset=\"UTF-8\"",
        "ApiKey"
      ]
    }
  },
  "status" : 401
}
BulgakovAnton commented 4 years ago

today we solved the password problem and gained experience with the correct reading of the documentation Screenshot from 2020-10-12 18-16-49

BulgakovAnton commented 4 years ago

:clock1: 4 hours setting up logstash and studying how to properly set it up in conjunction with elastiсseаrch

BulgakovAnton commented 4 years ago

5H setting up logstash and filebeat. but have some problem with data Screenshot from 2020-10-15 19-22-33

BulgakovAnton commented 4 years ago

when I set up properties in filebeat I have the error```

2020-10-20T13:35:47.256Z ERROR instance/beat.go:951 Exiting: 1 error: error loading index pattern: returned 500 to import file: . Response: {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."} Exiting: 1 error: error loading index pattern: returned 500 to import file: . Response: {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."}

BulgakovAnton commented 4 years ago

6h today I set up logstash and filebeat and tried to see the logs

BulgakovAnton commented 4 years ago

6H Today i start learning grafana and prometheus, install grafana and prometheus. Create my first dashboard