https://github.com/githubcdr/docker-elk
Elasticsearch Logstash Kibana 5 on Alpine Docker
https://github.com/githubcdr/docker-elk
alpine docker elasticsearch filebeat kibana
Last synced: 5 months ago
JSON representation
Elasticsearch Logstash Kibana 5 on Alpine Docker
- Host: GitHub
- URL: https://github.com/githubcdr/docker-elk
- Owner: githubcdr
- License: mit
- Created: 2016-10-31T21:00:32.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2026-01-27T18:50:50.000Z (6 months ago)
- Last Synced: 2026-01-28T05:00:05.983Z (6 months ago)
- Topics: alpine, docker, elasticsearch, filebeat, kibana
- Language: Dockerfile
- Homepage:
- Size: 137 KB
- Stars: 8
- Watchers: 1
- Forks: 5
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Elasticsearch, Logstash and Kibana 5.6.16
This is a small container at only 300Mb compressed, running a full functional ELK 5 stack.
## Important
Make sure your docker hosts has the folowing sysctl setting, this is required for ELK
insert in /etc/sysctl.conf
```
vm.max_map_count = 262144
```
or run
```
sysctl -w vm.max_map_count=262144
```
## Features
- filebeat support
- cisco syslog support
- yum.log support via filebeat
- nginx accesslogs support
- updated upstream grok patterns
- running on Alpine Linux with s6, small, clean and efficient
- Maxmind geo data enabled
- Each process runs as own user, in docker ;)
- multi input index is created based on type
## Instructions
Start the container
```
docker run -d -p 5601:5601 -p 9200:9200 -p 5044:5044 \
-v /var/lib/elasticsearch:/var/lib/elasticsearch \
--name elk \
cdrocker/elk5:latest
```
Check progress with
```
docker logs -f elk
```
You can now open kibana http://elasticsearchhost:5601
There will probably be no index patterns, you'll have to import them manually. For beats you can use the new import_dashboards script which automate this process. (Install filebeat for this functionality.)
```
/usr/share/filebeat/scripts/import_dashboards -es http://:9200
/usr/share/metricbeat/scripts/import_dashboards -es http://:9200
/usr/share/packetbeat/scripts/import_dashboards -es http://:9200
```
## Todo
- Add java environment options
- autoupdate GEO data
- curator install
- auto cleanup of old indices
- elasticsearch plugins