👆 위 강의를 수강하고 정리한 내용입니다.
1. ELK 소개
- Elasticsearch, Kibana, Beats, Logstash = ELK Stack
- 모든 형식의 모든 소스에서 안정적이게 수집
- 수집한 데이터를 실시간으로 검색, 분석, 시각화
2. ELK Stack 설치
ubuntu@ubuntu:~$ wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.13.4-amd64.deb
ubuntu@ubuntu:~$ wget https://artifacts.elastic.co/downloads/logstash/logstash-7.13.4-amd64.deb
ubuntu@ubuntu:~$ wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.13.4-amd64.deb
ubuntu@ubuntu:~$ wget https://artifacts.elastic.co/downloads/kibana/kibana-7.13.4-amd64.deb
ubuntu@ubuntu:~$ sudo dpkg -i elasticsearch-7.13.4-amd64.deb
ubuntu@ubuntu:~$ sudo dpkg -i kibana-7.13.4-amd64.deb
ubuntu@ubuntu:~$ sudo dpkg -i logstash-7.13.4-amd64.deb
ubuntu@ubuntu:~$ sudo service elasticsearch start
ubuntu@ubuntu:~$ netstat -antp | grep :9200
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp6 0 0 127.0.0.1:9200 :::* LISTEN -
tcp6 0 0 ::1:9200 :::* LISTEN -
ubuntu@ubuntu:~$ service kibana start
ubuntu@ubuntu:~$ netstat -antp | grep :5601
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 127.0.0.1:5601 0.0.0.0:* LISTEN
Reference
'Security > ELK' 카테고리의 다른 글
[ELK] 파이썬으로 엘라스틱서치 다루기 (0) | 2021.12.03 |
---|---|
[ELK] Logstash/Filebeat (0) | 2021.11.20 |
[ELK] Kibana를 활용한 시각화 (0) | 2021.11.19 |
[ELK] Elasticsearch CRUD (0) | 2021.11.19 |