ARG ELASTIC_VERSION
FROM docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION}
RUN elasticsearch-plugin install -b https://github.com/opendistro-for-elasticsearch/alerting/releases/download/v1.13.1.0/alerting.zip
2. kibana에 open distro alert 설치
vi kibana/Dockerfile
ARG ELASTIC_VERSION
FROM docker.elastic.co/kibana/kibana:${ELASTIC_VERSION}
RUN kibana-plugin install https://github.com/opendistro-for-elasticsearch/alerting-kibana-plugin/releases/download/v1.13.0.0/opendistroAlertingKibana-1.13.0.0.zip
git clone https://github.com/deviantony/docker-elk.git
cd docker-elk
3. elasticsearch 설정 변경
vi elasticsearch/config/elasticsearch.yml
하단에 xpack.monitoring.collection.enabled: true 추가
---
## Default Elasticsearch configuration from Elasticsearch base image.
## https://github.com/elastic/elasticsearch/blob/main/distribution/docker/src/docker/config/elasticsearch.yml
#
cluster.name: "docker-cluster"
network.host: 0.0.0.0
## X-Pack settings
## see https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html
#
xpack.license.self_generated.type: trial
xpack.security.enabled: true
xpack.monitoring.collection.enabled: true
4. kibana 설정 변경
vi kibana/config/kibana.yml
elasticsearch.password: 패스워드 변경
5. logstash 설정 변경
vi logstash/config/logstash.yml
---
## Default Logstash configuration from Logstash base image.
## https://github.com/elastic/logstash/blob/main/docker/data/logstash/config/logstash-full.yml
#
http.host: "0.0.0.0"
xpack.monitoring.elasticsearch.hosts: [ "http://elasticsearch:9200" ]
vi logstash/pipeline/logstash.conf
input {
beats {
port => 5044
}
tcp {
port => 50000
codec => json_lines
type => logstash
}
}
## Add your filters / logstash plugins configuration here
output {
stdout {
}
elasticsearch {
hosts => "elasticsearch:9200"
index => "logstash-%{+YYYY.MM.dd}"
user => "elastic"
password => "패스워드"
}
}
6. docker-compose.yml
vi docker-compose.yml
ELASTIC_PASSWORD: 패스워드 변경
7. 실행
docker-compose build && docker-compose up -d
실행이 안됐습니다. ㅠㅠ
8. 에러 해결
에러: value of "elastic" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead.