Ansible Playbook for setting up the ELK/EFK Stack and Filebeat client on remote hosts
5.6
and 2.4
ELK versions are maintained as branches and master
branch will be 6.x currently.apache_reverse_proxy: true
install/group_vars/all.yml
vm.swappiness
as ELK/EFK is demanding and swapping kills the responsiveness.
echo "vm.swappiness=10" >> /etc/sysctl.conf
sysctl -p
logging_backend: fluentd
in group_vars/all.yml
install_curator_tool: true
in install/group_vars/all.yml
install_elasticsearch_xpack: true
install_kibana_xpack: true
install_logstash_xpack: true
elastic
and password: changeme
git clone https://github.com/sadsfae/ansible-elk
cd ansible-elk
sed -i 's/host-01/elkserver/' hosts
sed -i 's/host-02/elkclient/' hosts
ansible_system_user: ec2-user
ansible-playbook -i hosts install/elk.yml
admin
admin
elk_server
variableansible-playbook -i hosts install/elk-client.yml --extra-vars 'elk_server=X.X.X.X'
git clone https://github.com/sadsfae/ansible-elk
cd ansible-elk
git checkout 5.6
git clone https://github.com/sadsfae/ansible-elk
cd ansible-elk
git checkout 2.4
.
āāā hosts
āāā install
āĀ Ā āāā elk_client.yml
āĀ Ā āāā elk.yml
āĀ Ā āāā group_vars
āĀ Ā āĀ Ā āāā all.yml
āĀ Ā āāā roles
āĀ Ā āāā apache
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā 8080vhost.conf.j2
āĀ Ā āĀ Ā āāā kibana.conf.j2
āĀ Ā āāā curator
āĀ Ā āĀ Ā āāā files
āĀ Ā āĀ Ā āĀ Ā āāā curator.repo
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā curator-action.yml.j2
āĀ Ā āĀ Ā āāā curator-config.yml.j2
āĀ Ā āāā elasticsearch
āĀ Ā āĀ Ā āāā files
āĀ Ā āĀ Ā āĀ Ā āāā elasticsearch.in.sh
āĀ Ā āĀ Ā āĀ Ā āāā elasticsearch.repo
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā elasticsearch.yml.j2
āĀ Ā āāā elk_client
āĀ Ā āĀ Ā āāā files
āĀ Ā āĀ Ā āĀ Ā āāā elk.repo
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āāā filebeat
āĀ Ā āĀ Ā āāā meta
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā filebeat.yml.j2
āĀ Ā āĀ Ā āāā rsyslog-openstack.conf.j2
āĀ Ā āāā firewall
āĀ Ā āĀ Ā āāā handlers
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āāā fluentd
āĀ Ā āĀ Ā āāā files
āĀ Ā āĀ Ā āĀ Ā āāā filebeat-index-template.json
āĀ Ā āĀ Ā āĀ Ā āāā fluentd.repo
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā openssl_extras.cnf.j2
āĀ Ā āĀ Ā āāā td-agent.conf.j2
āĀ Ā āāā heartbeat
āĀ Ā āĀ Ā āāā meta
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā heartbeat.yml.j2
āĀ Ā āāā instructions
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āāā kibana
āĀ Ā āĀ Ā āāā files
āĀ Ā āĀ Ā āĀ Ā āāā kibana.repo
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā kibana.yml.j2
āĀ Ā āāā logstash
āĀ Ā āĀ Ā āāā files
āĀ Ā āĀ Ā āĀ Ā āāā filebeat-index-template.json
āĀ Ā āĀ Ā āĀ Ā āāā logstash.repo
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā 02-beats-input.conf.j2
āĀ Ā āĀ Ā āāā logstash.conf.j2
āĀ Ā āĀ Ā āāā openssl_extras.cnf.j2
āĀ Ā āāā metricbeat
āĀ Ā āĀ Ā āāā meta
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā metricbeat.yml.j2
āĀ Ā āāā nginx
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā kibana.conf.j2
āĀ Ā āĀ Ā āāā nginx.conf.j2
āĀ Ā āāā packetbeat
āĀ Ā āĀ Ā āāā meta
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā tasks
āĀ Ā āĀ Ā āĀ Ā āāā main.yml
āĀ Ā āĀ Ā āāā templates
āĀ Ā āĀ Ā āāā packetbeat.yml.j2
āĀ Ā āāā xpack
āĀ Ā āāā tasks
āĀ Ā āāā main.yml
āāā meta
āāā main.yml
56 directories, 52 files