{"id":986,"date":"2015-08-27T14:40:51","date_gmt":"2015-08-27T12:40:51","guid":{"rendered":"http:\/\/www.ayhanarda.com\/blog\/?p=986"},"modified":"2015-08-28T12:09:18","modified_gmt":"2015-08-28T10:09:18","slug":"docker-ile-elkstack-kurulumu","status":"publish","type":"post","link":"https:\/\/www.ayhanarda.com\/blog\/2015\/08\/docker-ile-elkstack-kurulumu\/","title":{"rendered":"Docker ile ELKStack Kurulumu"},"content":{"rendered":"

Elkstack ; ElasticSearch, Logstash ve Kibana\u00a0isimli 3 a\u00e7\u0131k kaynak yaz\u0131l\u0131m\u0131n birle\u015fimine verilen isimdir.<\/p>\n

Neden Docker ile kurulum derseniz ad\u0131 ge\u00e7en t\u00fcm bile\u015fenleri tek tek kurmak yerine tek seferde kurmak daha cazip g\u00f6z\u00fck\u00fcyor , elimizde yeni kurulmu\u015f bir ubuntu 14 oldu\u011funu ve ssh tan eri\u015fti\u011fimizi varsayal\u0131m ,\u00a0muhtemelen curl kurulu gelmeyecek , \u00f6ncelikle kural\u0131m.<\/p>\n

root@ayhanarda:\/# apt-get install curl<\/strong><\/p>\n

root@ayhanarda:\/# curl -sSL https:\/\/get.docker.com\/ubuntu\/ | sudo sh<\/strong><\/p>\n

\u015eimdi pip ile Docker Compose kural\u0131m.<\/p>\n

root@ayhanarda:\/# apt-get install python-pip<\/strong><\/p>\n

root@ayhanarda:\/# pip install -U docker-compose<\/strong><\/p>\n

\u015eimdi docker-compose dosyam\u0131za \u00e7al\u0131\u015fma izni verelim.<\/p>\n

root@ayhanarda:\/# chmod +x \/usr\/local\/bin\/docker-compose<\/strong><\/p>\n

\u015eimdi kurulumun buraya kadar do\u011fru olup olmad\u0131\u011f\u0131n\u0131 do\u011frulayal\u0131m.<\/p>\n

root@ayhanarda:\/# docker-compose –version<\/strong>
\ndocker-compose version: 1.4.0<\/p>\n

E\u011fer her \u015fey do\u011fru ise devam edebiliriz.<\/p>\n

Docker-elk n\u0131n git repository sini \u00e7ekelim.<\/p>\n

root@ubuntu:\/# git clone https:\/\/github.com\/deviantony\/docker-elk.git<\/strong><\/p>\n

\u015eimdi docker-elk dizinine gidip konteyner \u0131 \u00e7ekip aya\u011fa kald\u0131ral\u0131m.<\/p>\n

root@ayhanarda:\/# cd \/docker-elk\/<\/strong>
\nroot@ayhanarda:\/docker-elk# docker-compose up<\/strong><\/p>\n

Her\u015fey bu kadar , \u015fimdi biraz \u00a0beklemeliyiz. Muhtemelen 5 dk sonra a\u015fa\u011f\u0131daki gibi sat\u0131rlar g\u00f6rd\u00fc\u011f\u00fcn\u00fczde i\u015flem tamamlanm\u0131\u015f demektir.<\/p>\n

logstash_1 | INFO: [logstash-7f6fc37469c8-1-11622] started
\nkibana_1 | Starting Kibana
\nelasticsearch_1 | [2015-08-27 12:06:50,176][DEBUG][action.admin.cluster.health] [Proteus] observer: timeout notification from cluster service. timeout setting [5s], time since start [5s]
\nkibana_1 | {“name”:”Kibana”,”hostname”:”266bfe27abff”,”pid”:7,”level”:30,”msg”:”No existing kibana index found”,”time”:”2015-08-27T12:06:50.183Z”,”v”:0}
\nkibana_1 | {“name”:”Kibana”,”hostname”:”266bfe27abff”,”pid”:7,”level”:30,”msg”:”Listening on 0.0.0.0:5601″,”time”:”2015-08-27T12:06:50.364Z”,”v”:0}<\/p>\n

\u015eimdi browserdan ipadresi:5601 adresine eri\u015firsek bizi a\u015fa\u011f\u0131daki Kibana aray\u00fcz\u00fc kar\u015f\u0131layacak. Benim ip adresim 192.168.126.155 \u015feklinde idi.<\/p>\n

http:\/\/192.168.126.155:560<\/strong>1\/<\/p>\n

\"elkstack1\"<\/a><\/p>\n

 <\/p>\n

E\u011fer cluster \u0131 monitor etmek isterseniz a\u015fa\u011f\u0131daki url ye gidebilirsiniz.<\/p>\n

http:\/\/ipadresi:9200\/_plugin\/marvel\/<\/p>\n

\"marvel\"<\/a>\u015eimdi tek yap\u0131lmas\u0131 gereken bu ip adresinin 5000 nolu portuna logstash forwarder ile log g\u00f6ndermek , g\u00fczelce i\u015flenip grafiksel olarak Size sunuculacakt\u0131r.<\/p>\n

Mesela ben bir sitenin access loglar\u0131n\u0131 test i\u00e7in bir dosyaya kaydedip netcat ile sunucuya a\u015fa\u011f\u0131daki komut ile bast\u0131m , kibana daki g\u00f6r\u00fcnt\u00fcs\u00fc a\u015fa\u011f\u0131daki gibi yans\u0131d\u0131 , filtreler ile tam istedi\u011finiz loglar\u0131 alabilir ve grafikler de olu\u015fturabilirsiniz.<\/p>\n

root@ayhanarda:\/# nc localhost 5000 < \/home\/arda\/look2linux.log<\/strong><\/p>\n

\u015eimdi tekrar kibana ekran\u0131na bakabilirsiniz, loglar gelmi\u015f durumda.<\/p>\n

\"elkstack2\"<\/a><\/p>\n

Faydal\u0131 olmas\u0131 dile\u011fimle.<\/p>\n

Ayhan ARDA<\/p>\n

\"Share<\/a>