ELK stack install

A vagrant box that provisions Oracle software automatically, using Vagrant, an Oracle Linux box and a shell script.

Prerequisites

1. Install Oracle VM VirtualBox
2. Install Vagrant
3. install Git client

Getting started

1. Clone this repository git clone https://github.com/dima-kavalevsky-epam/elk-install
2. Change into the desired software folder
3. Follow the README.md instructions inside the folder

Building an ELK Stack with Vagrant and Ansible

This is the source code to along with the blog article ELK-Stack-with-Vagrant-and-Ansible

• Make sure that the host has sufficient CPU & RAM to build 2 vms as this one does.
• You can adjust the memory requirements in 'Vagrantfile'. Remember 5Gb RAM is required only for VM's!

1. Generate two VM's by vagrant tool

vagrant up 

2. Log in to ELKserver server and prepare to run ansible playbooks.

vagrant ssh elkserver
alias mc='LANG=en_EN.UTF-8 mc'

cd /workspace/
## Replace hostnames in inventory file
sed -i 's/host-01/elkserver/' hosts
sed -i 's/host-02/elkclient/' hosts
# Generating a new SSH key and adding it to the ssh-agent
ssh-keygen 

## Set PasswordAuthentication to yes for currecnt VM
sudo sed -i -e 's/^PasswordAuthentication no/PasswordAuthentication yes/' -e 's/^#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config
sudo /sbin/service sshd restart
sudo systemctl restart sshd

ssh-copy-id vagrant@elkserver
ssh-copy-id vagrant@elkclient
## The default Passwor vagrant
ansible -m ping all -i hosts

3. Run ansible playbook to install and configure ElasticSearch, Logtsash, Kibana, Nginx and Curator tools

cd /workspace/
ansible-playbook -v -i hosts install/elk.yml 
# -extra-vars "ansible_ssh_user=vagrant ansible_ssh_pass=vagrant"

4. Check ELK stack successful installation.

• Navigate to Kibana dashboard over Nginx on server and login with admin/admin permissions to verify successful installation.
• Check availability SSL Certificate key at http://192.168.56.21:8080/beat-forwarder.key for Filebeat

curl -O http://192.168.56.21:8080/beat-forwarder.key

5. Run ansible playbook to setup clients.

cd /workspace/
ansible-playbook -i hosts install/elk_client.yml --extra-vars 'elk_server=192.168.56.21'

6. Browse the link to Kibana

• Kibana

Account: admin/admin