Testings

 

Tips

Make sure the server time is correct for all servers (smil) as in use NTP.

I have divided stuff a bit, please read:

Logstash - Tips and Troubleshooting

Elasticsearch - Tips and Troubleshooting

 



Sample filebeat.yml config for my Confluence Server

      paths:
        - /var/log/auth.log
        - /var/log/syslog
      document_type: syslog
      input_type: log
    -
      paths:
        - /var/log/apache2/www.mos-eisley.dk-*.log
      document_type: apache
      input_type: log
    -
      paths:
        - /data/www/Fordor.log
        - /data/www/Baghus.log
      document_type: camfileslog
      input_type: log

 

Sample filebeat.yml config for my Alfresco Server

     paths:
        - /var/log/auth.log
        - /var/log/syslog
      document_type: syslog
      input_type: log
    -
      paths:
        - /var/log/apache2/alfresco.mos-eisley.dk-*.log
        - /var/log/apache2/elk.mos-eisley.dk-*.log
      document_type: apache
      input_type: log
    -
      paths:
       - /var/log/pingkaf.txt
      document_type: pinglog
      input_type: log

 

Other Stuff:

http://www.slideshare.net/aca_it/monitor-your-atlassian-stack-like-the-nsa

Elasticsearch CRUD

The Great Mapping Refactoring

Embedding Visualisations

A bit of logstash cooking 

ELK - 3 THINGS I WISH I'D KNOWN

Little Logstash Lessons - Part I: Using grok and mutate to type your data

5 Logstash Pitfalls You Need to Avoid