justmeandopensource / elk

Supporting Repo for ELK installation Youtube video

elk

Supporting Repo for ELK installation Youtube video

elk's Issues

Kibana and ES upgrade on docker

Hello, I hope you are doing great. I would like to open up about an issue that I am having.

I am currently trying to use Kibana 7.2.1 since it contains the alerting feature. I am running Kibana and Elasticsearch on a docker container. I want to upgrade the current version of Kibana but also ES otherwise I will have problems working with different versions as you know it. I have another server Docker and I plan on testing the upgrade on it since it's empty.
Can you guide me through the best solution to upgrade kibana and elasticsearch please ?
I found your vided entitled "[ Elasticsearch 6 ] Running Elasticsearch v7.1.1 in Docker containers" very useful however I am still not sure whether it's enough to give me the solution for my problem.

Thank you so much for your help and I hope you are keeping safe despite the Covid...

elastalert

Hello,

First i would like to thank you for the effort you're providing to the opensource community.
I watched your ELK playlist on youtube and it helped me so much.
I used elasalert as mentionned in your videos to send notifications and it was a good solution. But i found that we can integrate it with elastalert-server and praeco to have a GUI for alerts.
I tried to install it following all these tutorials but i get every time a different error.

• https://github.com/johnsusek/praeco

• https://medium.com/@ibrahim.ayadhi/hello-and-welcome-to-our-new-article-which-will-be-covering-the-alerting-part-in-our-socaas-136cf6258c49

• https://medium.com/@john_8166/praeco-walkthrough-5aada7e078a9

• https://awesomeopensource.com/project/johnsusek/praeco

Please can you help me to install it? do you have any other document that can help me?

Thank you so much in advance.

Unabe to increase the memory

# vi: set ft=ruby :

ENV['VAGRANT_NO_PARALLEL'] = 'yes'

Vagrant.configure(2) do |config|

  config.vm.provision "shell", path: "bootstrap.sh"

  config.vm.define "server" do |server|
    server.vm.box = "centos/7"
    server.vm.hostname = "server.example.com"
    server.vm.network "private_network", ip: "172.42.42.10"
    server.vm.provider "virtualbox" do |vb|
      vb.name = "server"
      vb.memory = "3000"
      vb.cpus = "2"
    end
  end

  config.vm.define "client" do |client|
    client.vm.box = "centos/7"
    client.vm.hostname = "client.example.com"
    client.vm.network "private_network", ip: "172.42.42.20"
    client.vm.provider "virtualbox" do |vb|
      vb.name = "client"
      vb.memory = "1024"
      vb.cpus = "1"
    end
  end

end
~                                                                                                                                                     
~                          

fre -m command output

[root@server ~]# free -m
              total        used        free      shared  buff/cache   available
Mem:            487         417           5           0          63          44
Swap:          2047         904        1143

collect data

can u explain how to get data from specific folder log file using filebeat..
thank you

password of client machine

The client machine doesnot login even after entering correct credentials as client login 'root' password 'admin'.

system-install needs to be ran befoe starting logstash

Could you please update the instructions. I have to run system-install to successfully create the startup script.

1 - sudo /usr/share/logstash/system-install
2 - systemctl start logstash

error while filebeat setup

encountered errors while setting up filebeat with ek $sudo filebeat setup
i am running same docker compose file with 7.1.1

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: Failed to import dashboard: Failed to load directory /usr/share/filebeat/kibana/7/dashboard:
error loading /usr/share/filebeat/kibana/7/dashboard/Filebeat-IBMMQ-Overview.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "4b2794c0-d901-11e8-aa1c-3fc8e6195a8e" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/Filebeat-aws-s3access-overview.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "4746e000-bacd-11e9-9f70-1f7bda85a5eb" has property "dashboard" which belongs to a more recent version of Kibana (7.3.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-autonomous-systems.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "d4e6520a-9ced-47c9-a8f2-7246e8cbd2d3" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-conversation-partners.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "ebea013f-9b5b-4f61-a9c8-c62bebf62ae9" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-flow-exporters.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "d4e6520a-9ced-47c9-a8f2-7246e8cbd2d3" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-flow-records.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "4bb0255e-18ed-45e4-bfb9-de8e35b12094" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-geo-location.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "f4c8cb5a-7336-449e-ab99-6e867b435b85" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-overview.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "ae334aec-31fa-4df7-a064-40b18831d819" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-top-n.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "d4e6520a-9ced-47c9-a8f2-7246e8cbd2d3" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/filebeat-netflow-traffic-analysis.json: returned 400 to import file: . Response: {"statusCode":400,"error":"Bad Request","message":"Document "abfa0b19-60cd-4984-9c3d-02ebf0aa1dfb" has property "visualization" which belongs to a more recent version of Kibana (7.2.0)."}