Logstash is the last of ELK stack components that we will be installing. It is used to processing pipelines, transforming and sending data from multiple sources.
The installation process does not differ from installation of Elasticsearch or Kibana. We still need to add repository, run installation and start the responsible service. You should add following content to your monitoring server installation playbook:
Once playbook is updated, you should run it on your management server:
ansible-playbook ./mon.yml Afterwards verify that logstash is running using command:
systemctl status logstashYou should see output similar to screenshot below:
That’s it for today. In my next post I will be covering installation of Filebeat in application server container.