(20)
https://www.elastic.co/guide/en/elasticsearch/reference/8.7/deb.html
https://www.elastic.co/guide/en/kibana/8.7/deb.html
https://qiita.com/nobuhikosekiya/items/7441186795b3da998e2f
Elasticsearch :v8.7
Kibana :v8.7
CPU: 2 vCPUs
メモリ: 4 GB
-- 1. Elasticsearchのインストール
sudo apt update -y
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg
sudo apt-get install apt-transport-https
echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list
sudo apt-get update && sudo apt-get install elasticsearch
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable elasticsearch.service
sudo systemctl start elasticsearch.service
sudo systemctl status elasticsearch.service
sudo /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana
-- 2. Kibanaのインストール
sudo apt-get update && sudo apt-get install kibana
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana.service
sudo vi /etc/kibana/kibana.yml
#server.host: "localhost"
↓
server.host: "0.0.0.0"
sudo systemctl start kibana.service
sudo systemctl status kibana.service
sudo /usr/share/kibana/bin/kibana-verification-code
-- 3. Fleet Serverのインストール
curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.7.0-linux-x86_64.tar.gz
tar xzvf elastic-agent-8.7.0-linux-x86_64.tar.gz
cd elastic-agent-8.7.0-linux-x86_64
sudo ./elastic-agent install \
--fleet-server-es=https://192.168.137.182:9200 \
--fleet-server-service-token=111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111 \
--fleet-server-policy=fleet-server-policy \
--fleet-server-es-ca-trusted-fingerprint=2222222222222222222222222222222222222222222222222222222222222222
-- 4. ログ収集のためのIntegrationsを追加
-- 5. ログ収集を試す
while true
do
date >> /tmp/a.log
sleep 5
done
log.file.path : "/tmp/a.log"
(11)
https://www.elastic.co/guide/en/elasticsearch/reference/8.7/deb.html
https://www.elastic.co/guide/en/kibana/8.7/deb.html
https://qiita.com/nobuhikosekiya/items/7441186795b3da998e2f
Elasticsearch :v8.7
Kibana :v8.7
CPU: 2 vCPUs
メモリ: 4 GB
-- 1. Elasticsearchのインストール
sudo apt update -y
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.7.0-amd64.deb
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.7.0-amd64.deb.sha512
shasum -a 512 -c elasticsearch-8.7.0-amd64.deb.sha512
sudo dpkg -i elasticsearch-8.7.0-amd64.deb
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable elasticsearch.service
sudo systemctl start elasticsearch.service
sudo systemctl status elasticsearch.service
sudo /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana
-- 2. Kibanaのインストール
wget https://artifacts.elastic.co/downloads/kibana/kibana-8.7.0-amd64.deb
wget https://artifacts.elastic.co/downloads/kibana/kibana-8.7.0-amd64.deb.sha512
shasum -a 512 -c kibana-8.7.0-amd64.deb.sha512
sudo dpkg -i kibana-8.7.0-amd64.deb
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana.service
sudo vi /etc/kibana/kibana.yml
#server.host: "localhost"
↓
server.host: "0.0.0.0"
sudo systemctl start kibana.service
sudo systemctl status kibana.service
sudo /usr/share/kibana/bin/kibana-verification-code
-- 3. Fleet Serverのインストール
sudo apt install curl -y
curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.7.0-linux-x86_64.tar.gz
tar xzvf elastic-agent-8.7.0-linux-x86_64.tar.gz
cd elastic-agent-8.7.0-linux-x86_64
sudo ./elastic-agent install \
--fleet-server-es=https://192.168.137.187:9200 \
--fleet-server-service-token=111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111 \
--fleet-server-policy=fleet-server-policy \
--fleet-server-es-ca-trusted-fingerprint=2222222222222222222222222222222222222222222222222222222222222222
-- 4. ログ収集のためのIntegrationsを追加
-- 5. ログ収集を試す
while true
do
date >> /tmp/a.log
sleep 5
done
log.file.path : "/tmp/a.log"
(RL8)
https://qiita.com/nobuhikosekiya/items/7441186795b3da998e2f
Elasticsearch :v8.5
Kibana :v8.5
CPU: 2 vCPUs
メモリ: 4 GB
-- 1. Elasticsearchのインストール
dnf update -y
dnf install perl-Digest-SHA -y
dnf install wget -y
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.5.3-x86_64.rpm
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.5.3-x86_64.rpm.sha512
shasum -a 512 -c elasticsearch-8.5.3-x86_64.rpm.sha512
rpm --install elasticsearch-8.5.3-x86_64.rpm
sudo systemctl daemon-reload
sudo systemctl enable elasticsearch.service
sudo systemctl start elasticsearch.service
sudo systemctl status elasticsearch.service
sudo /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana
-- 2. Kibanaのインストール
wget https://artifacts.elastic.co/downloads/kibana/kibana-8.5.3-x86_64.rpm
wget https://artifacts.elastic.co/downloads/kibana/kibana-8.5.3-x86_64.rpm.sha512
shasum -a 512 -c kibana-8.5.3-x86_64.rpm.sha512
rpm --install kibana-8.5.3-x86_64.rpm
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana.service
sudo vi /etc/kibana/kibana.yml
#server.host: "localhost"
↓
server.host: "0.0.0.0"
sudo systemctl start kibana.service
sudo systemctl status kibana.service
sudo /usr/share/kibana/bin/kibana-verification-code
-- 3. Fleet Serverのインストール
curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.3-linux-x86_64.tar.gz
tar xzvf elastic-agent-8.5.3-linux-x86_64.tar.gz
cd elastic-agent-8.5.3-linux-x86_64
sudo ./elastic-agent install \
--fleet-server-es=https://10.0.0.177:9200 \
--fleet-server-service-token=111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111 \
--fleet-server-policy=fleet-server-policy \
--fleet-server-es-ca-trusted-fingerprint=2222222222222222222222222222222222222222222222222222222222222222
-- 4. ログ収集のためのIntegrationsを追加
-- 5. ログ収集を試す
while true
do
date >> /tmp/a.log
sleep 5
done
log.file.path : "/tmp/a.log"
- Windows Server
(2022)
https://qiita.com/nobuhikosekiya/items/35ae0d94f3356a16f984
Elasticsearch :v8.7
Kibana :v8.7
CPU: 2 vCPUs
メモリ: 4 GB
