SysLog Forwarding for XenServer

DustinB3403

Has anyone setup syslog with Elk (with Elasticsearch 2.3 or greater) and Kibana

Danp

@DustinB3403 Maybe one of these?

DustinB3403

@Danp said in SysLog Forwarding for XenServer:

@DustinB3403 Maybe one of these?

I was actually just looking at that and Kibana...

I'm trying to determine if I can run it locally or if I need a DO account to do it...

scottalanmiller

@DustinB3403 said in SysLog Forwarding for XenServer:

Has anyone setup syslog with Elk (with Elasticsearch 2.3 or greater) and Kibana

I'm pretty sure my walkthrough covers that.

DustinB3403

@scottalanmiller This one, correct?

scottalanmiller

@DustinB3403 said in SysLog Forwarding for XenServer:

@scottalanmiller This one, correct?

Yes

BRRABill

Let me know how it goes. I'd love to install another free server around here.

TAKE THAT MICROSOFT!

DustinB3403

I'm getting stuck at

  ./load.sh

with

Loading dashboards to http://localhost:9200 in .kibana
Loading search Cache-transactions:
curl: (7) Failed connect to localhost:9200; Connection timed out

DustinB3403

You know if I wasn't tired I would've noticed that @scottalanmiller made that a bash file.......

DustinB3403

Sadly the connection timed out still......

I might have to make a clean installation tomorrow and deal with it then. . . .

DustinB3403

And filebeat is not able to be found...

Ok coming back to this from my house where I can work with a beer..

scottalanmiller

Filebeat not found where?

DustinB3403

@scottalanmiller from this continuation here.

https://mangolassi.it/topic/8308/configuring-logstash-and-filebeat-to-send-to-elk-logging-system

scottalanmiller

But you can't find the download?

DustinB3403

@scottalanmiller Correct, when I attempt to run the bash file, I'm responded with filebeat not found from any yum repository.

DustinB3403

I'm starting a clean installation on my personal lab to test with.

Should I bother with the syslog configuration before setting up Elk and LogStash?

scottalanmiller

No. Get ELK up first.

DustinB3403

@scottalanmiller Ok will follow your guide first, and then work on the Elk info.

scottalanmiller

Yeah. That way you know it is working before you make other changes.

DustinB3403

So for everyone looking to do this,

Start here
Then here

And then (and @scottalanmiller I'm asking for confirmation) perform what I posted in the OP.

Correct?