https://github.com/ahmedgrati/logstash-helm-chart
This is a Logstash helm chart that is part of the ELK stack.
https://github.com/ahmedgrati/logstash-helm-chart
Last synced: 7 months ago
JSON representation
This is a Logstash helm chart that is part of the ELK stack.
- Host: GitHub
- URL: https://github.com/ahmedgrati/logstash-helm-chart
- Owner: AhmedGrati
- License: apache-2.0
- Created: 2022-03-22T14:51:03.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2022-05-30T16:55:27.000Z (over 3 years ago)
- Last Synced: 2025-01-12T23:27:00.842Z (9 months ago)
- Size: 24.4 KB
- Stars: 1
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# logstash-helm-chart
This is a Logstash helm chart that is part of the ELK stack.
# Getting Started
1. Create `monitoring` namespace, by running the following command:
```shell
kubectl create ns monitoring
```
2. Pull `logstash` dependencies, by running the following command:
```shell
helm dependency update ./logstash-helm-chart
```
3. Create a secret that will hold elasticsearch credentials. It should look like this:
```yaml
apiVersion: v1
kind: Secret
metadata:
name: logstash-elastic-secret
namespace: monitoring
data:
username: ZWxhc3RpYw==
password: RWxhc3RpYzJQYXNzd29yZA==
```
4. Install the chart, by running this command:
```shell
helm install logstash logstash-helm-chart -f logstash-helm-chart/values.yaml -n monitoring
```
Setting up for Netflow
```bash
bin/logstash --modules netflow --setup -M netflow.var.elasticsearch.hosts=elastic.database:9200 -M netflow.var.elasticsearch.username=Elastic2Password -M netflow.var.elasticsearch.password=Elastic2Password -M netflow.var.kibana.host=10.96.195.40:5601 -M netflow.var.kibana.username=elastic -M netflow.var.kibana.password=Elastic2Password -M netflow.var.kibana.scheme=http -M netflow.var.kibana.ssl.enabled=false -M netflow.var.kibana.ssl.verification_mode=disable -M netflow.var.input.udp.port=4739 --path.data /usr/share/logstash/netflow-data --path.logs /usr/share/logstash/logstash.log
```
```YAML
netflow.conf: |
input {
udp {
port => 4739
codec => netflow {
versions => [5, 9]
}
type => netflow
}
udp {
port => 2055
codec => netflow {
versions => [10]
target => ipfix
}
type => ipfix
}
tcp {
port => 2055
codec => netflow {
versions => [10]
target => ipfix
}
type => ipfix
}
}
output {
elasticsearch {
hosts => ["http://elastic.database:9200"]
user => '${ELASTICSEARCH_USERNAME}'
password => '${ELASTICSEARCH_PASSWORD}'
index => "netflow-%{+YYYY.MM.dd}"
}
}
```