https://github.com/githubcdr/docker-elk7
ELK 7 running on Alpine Linux
https://github.com/githubcdr/docker-elk7
Last synced: 5 months ago
JSON representation
ELK 7 running on Alpine Linux
- Host: GitHub
- URL: https://github.com/githubcdr/docker-elk7
- Owner: githubcdr
- License: mit
- Created: 2019-07-30T12:18:25.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2022-08-03T17:23:51.000Z (almost 4 years ago)
- Last Synced: 2025-10-10T19:32:35.465Z (9 months ago)
- Language: Dockerfile
- Size: 6.84 KB
- Stars: 2
- Watchers: 0
- Forks: 2
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Elasticsearch, Logstash and Kibana 7.2.0
This is a small container at only 300Mb compressed, running a full functional ELK 7 stack.
## Important
Make sure your docker hosts has the folowing sysctl setting, this is required for ELK
insert in /etc/sysctl.conf
```
vm.max_map_count = 262144
```
or run
```
sysctl -w vm.max_map_count=262144
```
## Features
* filebeat support
* cisco syslog support
* yum.log support via filebeat
* nginx accesslogs support
* updated upstream grok patterns
* running on Alpine Linux with s6, small, clean and efficient
* Maxmind geo data enabled
* Each process runs as own user
* multi input index is created based on type
## Instructions
Start the container
```
docker run -d -p 5601:5601 -p 9200:9200 -p 5044:5044 \
-v /var/lib/elasticsearch:/var/lib/elasticsearch \
--name elk \
cdrocker/elk7
```
Check progress with
```
docker logs -f elk
```
You can now open kibana http://elasticsearchhost:5601
There will probably be no index patterns, you'll have to import them manually. For beats you can use the new import_dashboards script which automate this process. (Install filebeat for this functionality.)
```
/usr/share/filebeat/scripts/import_dashboards -es http://:9200
/usr/share/metricbeat/scripts/import_dashboards -es http://:9200
/usr/share/packetbeat/scripts/import_dashboards -es http://:9200
```
## Todo
* Add java environment options
* autoupdate GEO data
* curator install
* auto cleanup of old indices
* elasticsearch plugins