Credits

This is a fork of: https://github.com/deviantony/docker-elk.git

Added Logspout and fixed the format of logs.

Only docker-compose.yml is changed the stack one was not modified.

Usage

To start the stack just execute:

./docker-compose-elk.sh up -d

The Kibana will be available at: http://localhost:5601

• user: elastic
• pass: changeme

After first time login you should create the first logstash-* index.

To start with Elasticsearch ports and Logstash ports exposed execute:

./docker-compose-elk-ports.sh up -d

Data Directory

All the indexed data is kept under ./data/...

To cleanup just stop the dockers and delete the directory.

That will cleanup all your Kibana objects, dashboards, visualizations, etc

So be careful !!!

Config

To change the ELK version check .env

To include in the indexing the logs from the elk docker containers set empty to LOGSPOUNT_EXCLUDE_LABELS to .env

Using Logspout

Used for docker logs this: https://hub.docker.com/r/gliderlabs/logspout

Modified to parse as JSON.

ELK README

Check ELK README

TODOs

• Fix stack - docker swarm mode