mirror of
https://github.com/deviantony/docker-elk.git
synced 2026-04-14 05:03:28 +02:00
Create release-7.x branch for Elastic 7.x series
This commit is contained in:
Antoine Cotten
2
.env
2
.env
@@ -1,4 +1,4 @@
|
||||
ELASTIC_VERSION=8.15.2
|
||||
ELASTIC_VERSION=7.17.24
|
||||
|
||||
## Passwords for stack users
|
||||
#
|
||||
|
||||
14
.github/dependabot.yml
vendored
14
.github/dependabot.yml
vendored
@@ -1,14 +0,0 @@
|
||||
# Dependabot configuration
|
||||
#
|
||||
# For more information, please refer to:
|
||||
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
|
||||
|
||||
version: 2
|
||||
|
||||
updates:
|
||||
|
||||
# Maintain dependencies for GitHub Actions
|
||||
- package-ecosystem: github-actions
|
||||
directory: /
|
||||
schedule:
|
||||
interval: weekly
|
||||
20
.github/workflows/ci.yml
vendored
20
.github/workflows/ci.yml
vendored
@@ -2,9 +2,9 @@ name: CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ main ]
|
||||
branches: [ release-7.x ]
|
||||
pull_request:
|
||||
branches: [ main ]
|
||||
branches: [ release-7.x ]
|
||||
|
||||
jobs:
|
||||
|
||||
@@ -124,27 +124,11 @@ jobs:
|
||||
|
||||
- name: Execute Enterprise Search test suite
|
||||
run: |
|
||||
|
||||
# Set mandatory Elasticsearch settings
|
||||
|
||||
sed -i '$ a xpack.security.authc.api_key.enabled: true' elasticsearch/config/elasticsearch.yml
|
||||
|
||||
# Restart Elasticsearch for changes to take effect
|
||||
|
||||
docker compose restart elasticsearch
|
||||
|
||||
# Run Enterprise Search and execute tests
|
||||
|
||||
sed -i 's/\(secret_management.encryption_keys:\)/\1 [test-encrypt]/g' extensions/enterprise-search/config/enterprise-search.yml
|
||||
|
||||
docker compose -f docker-compose.yml -f extensions/enterprise-search/enterprise-search-compose.yml up --remove-orphans -d enterprise-search
|
||||
.github/workflows/scripts/run-tests-enterprise-search.sh
|
||||
|
||||
# Revert changes to Elasticsearch configuration
|
||||
|
||||
sed -i '/xpack.security.authc.api_key.enabled: true/d' elasticsearch/config/elasticsearch.yml
|
||||
docker compose restart elasticsearch
|
||||
|
||||
- name: Collect troubleshooting data
|
||||
id: debug-data
|
||||
if: failure()
|
||||
|
||||
6
.github/workflows/docs.yml
vendored
6
.github/workflows/docs.yml
vendored
@@ -1,12 +1,10 @@
|
||||
name: Documentation
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 0 * * 0' # At 00:00 every Sunday
|
||||
push:
|
||||
branches: [ main ]
|
||||
branches: [ release-7.x ]
|
||||
pull_request:
|
||||
branches: [ main ]
|
||||
branches: [ release-7.x ]
|
||||
|
||||
jobs:
|
||||
|
||||
|
||||
23
.github/workflows/scripts/elasticsearch-setup-passwords.exp
vendored
Executable file
23
.github/workflows/scripts/elasticsearch-setup-passwords.exp
vendored
Executable file
@@ -0,0 +1,23 @@
|
||||
#!/usr/bin/expect -f
|
||||
|
||||
# List of expected users with dummy password
|
||||
set user "(elastic|apm_system|kibana_system|logstash_system|beats_system|remote_monitoring_user)"
|
||||
set password "testpasswd"
|
||||
|
||||
# Find elasticsearch container id
|
||||
set cid [exec docker ps -q -f label=com.docker.compose.service=elasticsearch]
|
||||
|
||||
set cmd "docker exec -it $cid bin/elasticsearch-setup-passwords interactive -s -b -u http://localhost:9200"
|
||||
|
||||
spawn {*}$cmd
|
||||
|
||||
expect {
|
||||
-re "(E|Ree)nter password for \\\[$user\\\]: " {
|
||||
send "$password\r"
|
||||
exp_continue
|
||||
}
|
||||
eof
|
||||
}
|
||||
|
||||
lassign [wait] pid spawnid os_error_flag value
|
||||
exit $value
|
||||
23
.github/workflows/scripts/run-tests-core.sh
vendored
23
.github/workflows/scripts/run-tests-core.sh
vendored
@@ -27,6 +27,25 @@ grouplog 'Wait for readiness of Kibana'
|
||||
poll_ready "$cid_kb" 'http://kibana:5601/api/status' --resolve "kibana:5601:${ip_kb}" -u 'kibana_system:testpasswd'
|
||||
endgroup
|
||||
|
||||
log 'Creating Logstash index pattern in Kibana'
|
||||
source .env
|
||||
curl -X POST -D- "http://${ip_kb}:5601/api/saved_objects/index-pattern" \
|
||||
-s -w '\n' \
|
||||
-H 'Content-Type: application/json' \
|
||||
-H "kbn-version: ${ELASTIC_VERSION}" \
|
||||
-u elastic:testpasswd \
|
||||
-d '{"attributes":{"title":"logstash-*","timeFieldName":"@timestamp"}}'
|
||||
|
||||
log 'Searching index pattern via Kibana API'
|
||||
response="$(curl "http://${ip_kb}:5601/api/saved_objects/_find?type=index-pattern" -s -u elastic:testpasswd)"
|
||||
echo "$response"
|
||||
declare -i count
|
||||
count="$(jq -rn --argjson data "${response}" '$data.total')"
|
||||
if (( count != 1 )); then
|
||||
echo "Expected 1 index pattern, got ${count}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
log 'Sending message to Logstash TCP input'
|
||||
|
||||
declare -i was_retried=0
|
||||
@@ -47,7 +66,7 @@ if ((was_retried)); then
|
||||
fi
|
||||
|
||||
declare -a refresh_args=( '-X' 'POST' '-s' '-w' '%{http_code}' '-u' 'elastic:testpasswd'
|
||||
'http://elasticsearch:9200/logs-generic-default/_refresh'
|
||||
'http://elasticsearch:9200/logstash-*/_refresh'
|
||||
'--resolve' "elasticsearch:9200:${ip_es}"
|
||||
)
|
||||
|
||||
@@ -87,7 +106,7 @@ EOD
|
||||
)
|
||||
|
||||
declare -a search_args=( '-s' '-u' 'elastic:testpasswd'
|
||||
'http://elasticsearch:9200/logs-generic-default/_search?pretty'
|
||||
'http://elasticsearch:9200/logstash-*/_search?pretty'
|
||||
'--resolve' "elasticsearch:9200:${ip_es}"
|
||||
'-H' 'Content-Type: application/json'
|
||||
'-d' "${query}"
|
||||
|
||||
69
.github/workflows/scripts/run-tests-fleet.sh
vendored
69
.github/workflows/scripts/run-tests-fleet.sh
vendored
@@ -107,72 +107,3 @@ if (( count == 0 )); then
|
||||
echo 'Expected at least 1 document'
|
||||
exit 1
|
||||
fi
|
||||
|
||||
log 'Searching a container document generated by Fleet Server'
|
||||
|
||||
query=$( (IFS= read -r -d '' data || echo "$data" | jq -c) <<EOD
|
||||
{
|
||||
"query": {
|
||||
"bool": {
|
||||
"must": [
|
||||
{
|
||||
"term": {
|
||||
"agent.name": "fleet-server"
|
||||
}
|
||||
},
|
||||
{
|
||||
"term": {
|
||||
"agent.type": "filebeat"
|
||||
}
|
||||
},
|
||||
{
|
||||
"term": {
|
||||
"container.name": "docker-elk-elasticsearch-1"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
EOD
|
||||
)
|
||||
|
||||
search_args=( '-s' '-u' 'elastic:testpasswd'
|
||||
'http://elasticsearch:9200/logs-docker.container_logs-default/_search?size=1&pretty'
|
||||
'--resolve' "elasticsearch:9200:${ip_es}"
|
||||
'-H' 'Content-Type: application/json'
|
||||
'-d' "${query}"
|
||||
)
|
||||
response=
|
||||
count=0
|
||||
|
||||
echo "curl arguments: ${search_args[*]}"
|
||||
|
||||
was_retried=0
|
||||
|
||||
# retry for max 60s (30*2s)
|
||||
for _ in $(seq 1 30); do
|
||||
response="$(curl "${search_args[@]}")"
|
||||
|
||||
set +u # prevent "unbound variable" if assigned value is not an integer
|
||||
count="$(jq -rn --argjson data "${response}" '$data.hits.total.value')"
|
||||
set -u
|
||||
|
||||
if (( count > 0 )); then
|
||||
break
|
||||
fi
|
||||
|
||||
was_retried=1
|
||||
echo -n 'x' >&2
|
||||
sleep 2
|
||||
done
|
||||
if ((was_retried)); then
|
||||
# flush stderr, important in non-interactive environments (CI)
|
||||
echo >&2
|
||||
fi
|
||||
|
||||
echo "$response"
|
||||
if (( count == 0 )); then
|
||||
echo 'Expected at least 1 document'
|
||||
exit 1
|
||||
fi
|
||||
|
||||
57
.github/workflows/spam-issue-close.yml
vendored
57
.github/workflows/spam-issue-close.yml
vendored
@@ -1,57 +0,0 @@
|
||||
name: Close issues without context
|
||||
|
||||
permissions:
|
||||
issues: write
|
||||
|
||||
on:
|
||||
issues:
|
||||
types: [ labeled ]
|
||||
|
||||
jobs:
|
||||
|
||||
close-lock:
|
||||
name: Close and lock issues
|
||||
if: contains(github.event.issue.labels.*.name, 'bot:close') && github.event.issue.state == 'open'
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Close
|
||||
id: close
|
||||
uses: actions/stale@v9.0.0
|
||||
with:
|
||||
days-before-issue-stale: -1
|
||||
days-before-issue-close: 0
|
||||
stale-issue-label: bot:close
|
||||
close-issue-label: insufficient information
|
||||
close-issue-message: >-
|
||||
This description omits all, or critical parts of the information requested by maintainers to be able to
|
||||
reproduce the issue:
|
||||
|
||||
|
||||
- the **complete** log history of your Elastic components, including `setup`.
|
||||
- any change(s) performed to the docker-elk configuration.
|
||||
- details about the runtime environment, for both Docker and Compose.
|
||||
|
||||
|
||||
Therefore, this issue will now be **closed**. Please open a new issue and fill in the template. It saves
|
||||
everyone's efforts, and allows maintainers to provide you with a solution in as few round trips as possible.
|
||||
|
||||
Thank you for your understanding. :pray:
|
||||
|
||||
# Due to eventual consistency, listing closed issues immediately after a
|
||||
# close does not always yield the expected results. A sleep is a simple
|
||||
# enough remediation to this issue.
|
||||
- name: Pause
|
||||
if: fromJson(steps.close.outputs.closed-issues-prs)[0]
|
||||
run: sleep 5
|
||||
|
||||
- name: Lock
|
||||
uses: dessant/lock-threads@v5
|
||||
if: fromJson(steps.close.outputs.closed-issues-prs)[0]
|
||||
with:
|
||||
process-only: issues
|
||||
issue-inactive-days: 0
|
||||
include-any-issue-labels: bot:close
|
||||
remove-issue-labels: bot:close
|
||||
issue-lock-reason: spam
|
||||
log-output: true
|
||||
42
.github/workflows/update-merge.yml
vendored
42
.github/workflows/update-merge.yml
vendored
@@ -1,42 +0,0 @@
|
||||
name: Merge Elastic updates
|
||||
|
||||
on:
|
||||
workflow_run:
|
||||
workflows: [ CI ]
|
||||
types:
|
||||
- completed
|
||||
branches:
|
||||
- update/main
|
||||
- update/tls
|
||||
- update/release-7.x
|
||||
|
||||
jobs:
|
||||
|
||||
merge:
|
||||
name: Merge pull request
|
||||
if: github.event.workflow_run.conclusion == 'success'
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Impersonate update bot
|
||||
uses: actions/create-github-app-token@v1
|
||||
id: generate-token
|
||||
with:
|
||||
app-id: ${{ secrets.APP_ID }}
|
||||
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
||||
|
||||
- name: Approve and merge
|
||||
uses: ridedott/merge-me-action@v2
|
||||
with:
|
||||
GITHUB_LOGIN: docker-elk-updater
|
||||
GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
|
||||
|
||||
- name: Delete branch
|
||||
uses: actions/github-script@v7
|
||||
with:
|
||||
script: |
|
||||
await github.request('DELETE /repos/{owner}/{repo}/git/refs/{ref}', {
|
||||
owner: '${{ github.event.workflow_run.repository.owner.login }}',
|
||||
repo: '${{ github.event.workflow_run.repository.name }}',
|
||||
ref: 'heads/${{ github.event.workflow_run.head_branch }}'
|
||||
})
|
||||
103
.github/workflows/update.yml
vendored
103
.github/workflows/update.yml
vendored
@@ -1,103 +0,0 @@
|
||||
name: Update Elastic release
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 0 * * 0' # At 00:00 every Sunday
|
||||
|
||||
jobs:
|
||||
|
||||
check-and-update:
|
||||
name: Check and update Elastic release
|
||||
runs-on: ubuntu-latest
|
||||
strategy:
|
||||
matrix:
|
||||
include:
|
||||
- release: 8.x
|
||||
branch: main
|
||||
- release: 8.x
|
||||
branch: tls
|
||||
- release: 7.x
|
||||
branch: release-7.x
|
||||
|
||||
steps:
|
||||
- uses: actions/setup-node@v4
|
||||
- run: npm install semver
|
||||
|
||||
- name: Get latest release version
|
||||
uses: actions/github-script@v7
|
||||
id: get-latest-release
|
||||
with:
|
||||
script: |
|
||||
const semver = require('semver')
|
||||
|
||||
const latestVersion = await github.
|
||||
paginate(github.rest.repos.listReleases, {
|
||||
owner: 'elastic',
|
||||
repo: 'elasticsearch'
|
||||
})
|
||||
.then(releases => {
|
||||
for (const release of releases) {
|
||||
// Results are returned sorted by created_at, so it is safe to assume
|
||||
// that the first encountered match is also the series' latest release.
|
||||
|
||||
const version=semver.clean(release.tag_name)
|
||||
|
||||
if (semver.satisfies(version, '${{ matrix.release }}')) {
|
||||
return version
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
if (latestVersion) {
|
||||
// Return an object so that the result can be handled as structured data
|
||||
// instead of a quoted string in subsequent steps.
|
||||
return { version: latestVersion }
|
||||
}
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
if: steps.get-latest-release.outputs.result
|
||||
with:
|
||||
ref: ${{ matrix.branch }}
|
||||
|
||||
- name: Update stack version
|
||||
id: update-files
|
||||
if: steps.get-latest-release.outputs.result
|
||||
run: |
|
||||
source .env
|
||||
cur_ver="$ELASTIC_VERSION"
|
||||
new_ver=${{ fromJson(steps.get-latest-release.outputs.result).version }}
|
||||
|
||||
# Escape period characters so sed interprets them literally
|
||||
cur_ver="${cur_ver//./\\.}"
|
||||
|
||||
declare -a upd_files=( .env README.md */Dockerfile extensions/*/Dockerfile )
|
||||
if [ -f tls/README.md ]; then
|
||||
upd_files+=( tls/README.md )
|
||||
fi
|
||||
|
||||
sed -i "s/${cur_ver}/${new_ver}/g" "${upd_files[@]}"
|
||||
|
||||
git_status="$(git status --porcelain)"
|
||||
if [[ ${git_status} ]]; then
|
||||
echo -e 'Changes to be committed:\n'
|
||||
echo "${git_status}"
|
||||
echo 'has-changes=true' >>"$GITHUB_OUTPUT"
|
||||
fi
|
||||
|
||||
- name: Impersonate update bot
|
||||
uses: actions/create-github-app-token@v1
|
||||
id: generate-token
|
||||
if: steps.update-files.outputs.has-changes
|
||||
with:
|
||||
app-id: ${{ secrets.APP_ID }}
|
||||
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
||||
|
||||
- name: Send pull request to update to new version
|
||||
if: steps.update-files.outputs.has-changes
|
||||
uses: peter-evans/create-pull-request@v7
|
||||
with:
|
||||
token: ${{ steps.generate-token.outputs.token }}
|
||||
branch: update/${{ matrix.branch }}
|
||||
commit-message: Update to v${{ fromJson(steps.get-latest-release.outputs.result).version }}
|
||||
title: Update to v${{ fromJson(steps.get-latest-release.outputs.result).version }}
|
||||
delete-branch: true
|
||||
111
README.md
111
README.md
@@ -1,19 +1,19 @@
|
||||
# Elastic stack (ELK) on Docker
|
||||
|
||||
[](https://www.elastic.co/blog/category/releases)
|
||||
[](https://github.com/deviantony/docker-elk/actions?query=workflow%3ACI+branch%3Amain)
|
||||
[](https://www.elastic.co/blog/category/releases)
|
||||
[](https://github.com/deviantony/docker-elk/actions?query=workflow%3ACI+branch%3Arelease-7.x)
|
||||
[](https://app.gitter.im/#/room/#deviantony_docker-elk:gitter.im)
|
||||
|
||||
Run the latest version of the [Elastic stack][elk-stack] with Docker and Docker Compose.
|
||||
Run the version 7.x of the [Elastic stack][elk-stack] with Docker and Docker Compose.
|
||||
|
||||
It gives you the ability to analyze any data set by using the searching/aggregation capabilities of Elasticsearch and
|
||||
the visualization power of Kibana.
|
||||
|
||||
Based on the [official Docker images][elastic-docker] from Elastic:
|
||||
|
||||
* [Elasticsearch](https://github.com/elastic/elasticsearch/tree/main/distribution/docker)
|
||||
* [Logstash](https://github.com/elastic/logstash/tree/main/docker)
|
||||
* [Kibana](https://github.com/elastic/kibana/tree/main/src/dev/build/tasks/os_packages/docker_generator)
|
||||
* [Elasticsearch](https://github.com/elastic/elasticsearch/tree/7.17/distribution/docker)
|
||||
* [Logstash](https://github.com/elastic/logstash/tree/7.17/docker)
|
||||
* [Kibana](https://github.com/elastic/kibana/tree/7.17/src/dev/build/tasks/os_packages/docker_generator)
|
||||
|
||||
Other available stack variants:
|
||||
|
||||
@@ -70,6 +70,7 @@ own_. [sherifabdlnaby/elastdocker][elastdocker] is one example among others of p
|
||||
* [Initial setup](#initial-setup)
|
||||
* [Setting up user authentication](#setting-up-user-authentication)
|
||||
* [Injecting data](#injecting-data)
|
||||
* [Default Kibana index pattern creation](#default-kibana-index-pattern-creation)
|
||||
* [Cleanup](#cleanup)
|
||||
* [Version selection](#version-selection)
|
||||
1. [Configuration](#configuration)
|
||||
@@ -139,7 +140,7 @@ instructions from the [documentation][mac-filesharing] to add more locations.
|
||||
Clone this repository onto the Docker host that will run the stack with the command below:
|
||||
|
||||
```sh
|
||||
git clone https://github.com/deviantony/docker-elk.git
|
||||
git clone --branch release-7.x https://github.com/deviantony/docker-elk.git
|
||||
```
|
||||
|
||||
Then, initialize the Elasticsearch users and groups required by docker-elk by executing the command:
|
||||
@@ -177,32 +178,20 @@ browser and use the following (default) credentials to log in:
|
||||
> [!NOTE]
|
||||
> Refer to [Security settings in Elasticsearch][es-security] to disable authentication.
|
||||
|
||||
> [!WARNING]
|
||||
> Starting with Elastic v8.0.0, it is no longer possible to run Kibana using the bootstraped privileged `elastic` user.
|
||||
|
||||
The _"changeme"_ password set by default for all aforementioned users is **unsecure**. For increased security, we will
|
||||
reset the passwords of all aforementioned Elasticsearch users to random secrets.
|
||||
|
||||
1. Reset passwords for default users
|
||||
1. Reset passwords for built-in users
|
||||
|
||||
The commands below reset the passwords of the `elastic`, `logstash_internal` and `kibana_system` users. Take note
|
||||
of them.
|
||||
The command below resets the passwords of all 6 [built-in users][builtin-users]. Take note of them.
|
||||
|
||||
```sh
|
||||
docker compose exec elasticsearch bin/elasticsearch-reset-password --batch --user elastic
|
||||
docker compose exec -T elasticsearch bin/elasticsearch-setup-passwords auto --batch
|
||||
```
|
||||
|
||||
```sh
|
||||
docker compose exec elasticsearch bin/elasticsearch-reset-password --batch --user logstash_internal
|
||||
```
|
||||
|
||||
```sh
|
||||
docker compose exec elasticsearch bin/elasticsearch-reset-password --batch --user kibana_system
|
||||
```
|
||||
|
||||
If the need for it arises (e.g. if you want to [collect monitoring information][ls-monitoring] through Beats and
|
||||
other components), feel free to repeat this operation at any time for the rest of the [built-in
|
||||
users][builtin-users].
|
||||
The password of the `logstash_internal` user must be changed manually, either from Kibana's [Stack Management >
|
||||
Users][kibana-sec] view, or using the procedure described at [How to reset a password
|
||||
programmatically](#how-to-reset-a-password-programmatically).
|
||||
|
||||
1. Replace usernames and passwords in configuration files
|
||||
|
||||
@@ -256,6 +245,37 @@ cat /path/to/logfile.log | nc --send-only localhost 50000 # nmap
|
||||
|
||||
You can also load the sample data provided by your Kibana installation.
|
||||
|
||||
#### Default Kibana index pattern creation
|
||||
|
||||
When Kibana launches for the first time, it is not configured with any index pattern.
|
||||
|
||||
##### Via the Kibana web UI
|
||||
|
||||
> [!NOTE]
|
||||
> You need to inject data into Logstash before being able to configure a Logstash index pattern via the Kibana web UI.
|
||||
|
||||
Navigate to the _Discover_ view of Kibana from the left sidebar. You will be prompted to create an index pattern. Enter
|
||||
`logstash-*` to match Logstash indices then, on the next page, select `@timestamp` as the time filter field. Finally,
|
||||
click _Create index pattern_ and return to the _Discover_ view to inspect your log entries.
|
||||
|
||||
Refer to [Connect Kibana with Elasticsearch][connect-kibana] and [Creating an index pattern][index-pattern] for detailed
|
||||
instructions about the index pattern configuration.
|
||||
|
||||
##### On the command line
|
||||
|
||||
Create an index pattern via the Kibana API:
|
||||
|
||||
```sh
|
||||
curl -XPOST -D- 'http://localhost:5601/api/saved_objects/index-pattern' \
|
||||
-H 'Content-Type: application/json' \
|
||||
-H 'kbn-version: 7.17.24' \
|
||||
-u elastic:<your generated elastic password> \
|
||||
-d '{"attributes":{"title":"logstash-*","timeFieldName":"@timestamp"}}'
|
||||
```
|
||||
|
||||
The created pattern will automatically be marked as the default index pattern as soon as the Kibana UI is opened for the
|
||||
first time.
|
||||
|
||||
### Cleanup
|
||||
|
||||
Elasticsearch data is persisted inside a volume by default.
|
||||
@@ -268,9 +288,6 @@ docker compose down -v
|
||||
|
||||
### Version selection
|
||||
|
||||
This repository stays aligned with the latest version of the Elastic stack. The `main` branch tracks the current major
|
||||
version (8.x).
|
||||
|
||||
To use a different version of the core Elastic components, simply change the version number inside the [`.env`](.env)
|
||||
file. If you are upgrading an existing stack, remember to rebuild all container images using the `docker compose build`
|
||||
command.
|
||||
@@ -279,12 +296,6 @@ command.
|
||||
> Always pay attention to the [official upgrade instructions][upgrade] for each individual component before performing a
|
||||
> stack upgrade.
|
||||
|
||||
Older major versions are also supported on separate branches:
|
||||
|
||||
* [`release-7.x`](https://github.com/deviantony/docker-elk/tree/release-7.x): 7.x series
|
||||
* [`release-6.x`](https://github.com/deviantony/docker-elk/tree/release-6.x): 6.x series (End-of-life)
|
||||
* [`release-5.x`](https://github.com/deviantony/docker-elk/tree/release-5.x): 5.x series (End-of-life)
|
||||
|
||||
## Configuration
|
||||
|
||||
> [!IMPORTANT]
|
||||
@@ -465,10 +476,10 @@ See the following Wiki pages:
|
||||
[elk-stack]: https://www.elastic.co/what-is/elk-stack
|
||||
[elastic-docker]: https://www.docker.elastic.co/
|
||||
[subscriptions]: https://www.elastic.co/subscriptions
|
||||
[es-security]: https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html
|
||||
[license-settings]: https://www.elastic.co/guide/en/elasticsearch/reference/current/license-settings.html
|
||||
[license-mngmt]: https://www.elastic.co/guide/en/kibana/current/managing-licenses.html
|
||||
[license-apis]: https://www.elastic.co/guide/en/elasticsearch/reference/current/licensing-apis.html
|
||||
[es-security]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-settings.html
|
||||
[license-settings]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/license-settings.html
|
||||
[license-mngmt]: https://www.elastic.co/guide/en/kibana/7.17/managing-licenses.html
|
||||
[license-apis]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/licensing-apis.html
|
||||
|
||||
[elastdocker]: https://github.com/sherifabdlnaby/elastdocker
|
||||
|
||||
@@ -476,29 +487,29 @@ See the following Wiki pages:
|
||||
[compose-install]: https://docs.docker.com/compose/install/
|
||||
[linux-postinstall]: https://docs.docker.com/engine/install/linux-postinstall/
|
||||
|
||||
[bootstrap-checks]: https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html
|
||||
[es-sys-config]: https://www.elastic.co/guide/en/elasticsearch/reference/current/system-config.html
|
||||
[es-heap]: https://www.elastic.co/guide/en/elasticsearch/reference/current/important-settings.html#heap-size-settings
|
||||
[bootstap-checks]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/bootstrap-checks.html
|
||||
[es-sys-config]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/system-config.html
|
||||
[es-heap]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/important-settings.html#heap-size-settings
|
||||
|
||||
[win-filesharing]: https://docs.docker.com/desktop/settings/windows/#file-sharing
|
||||
[mac-filesharing]: https://docs.docker.com/desktop/settings/mac/#file-sharing
|
||||
|
||||
[builtin-users]: https://www.elastic.co/guide/en/elasticsearch/reference/current/built-in-users.html
|
||||
[ls-monitoring]: https://www.elastic.co/guide/en/logstash/current/monitoring-with-metricbeat.html
|
||||
[sec-cluster]: https://www.elastic.co/guide/en/elasticsearch/reference/current/secure-cluster.html
|
||||
[builtin-users]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/built-in-users.html
|
||||
[sec-cluster]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/secure-cluster.html
|
||||
[kibana-sec]: https://www.elastic.co/guide/en/kibana/7.17/xpack-security.html
|
||||
|
||||
[connect-kibana]: https://www.elastic.co/guide/en/kibana/current/connect-to-elasticsearch.html
|
||||
[index-pattern]: https://www.elastic.co/guide/en/kibana/current/index-patterns.html
|
||||
[connect-kibana]: https://www.elastic.co/guide/en/kibana/7.17/connect-to-elasticsearch.html
|
||||
[index-pattern]: https://www.elastic.co/guide/en/kibana/7.17/index-patterns.html
|
||||
|
||||
[config-es]: ./elasticsearch/config/elasticsearch.yml
|
||||
[config-kbn]: ./kibana/config/kibana.yml
|
||||
[config-ls]: ./logstash/config/logstash.yml
|
||||
|
||||
[es-docker]: https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html
|
||||
[kbn-docker]: https://www.elastic.co/guide/en/kibana/current/docker.html
|
||||
[ls-docker]: https://www.elastic.co/guide/en/logstash/current/docker-config.html
|
||||
[es-docker]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/docker.html
|
||||
[kbn-docker]: https://www.elastic.co/guide/en/kibana/7.17/docker.html
|
||||
[ls-docker]: https://www.elastic.co/guide/en/logstash/7.17/docker-config.html
|
||||
|
||||
[upgrade]: https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-upgrade.html
|
||||
[upgrade]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/setup-upgrade.html
|
||||
|
||||
<!-- markdownlint-configure-file
|
||||
{
|
||||
|
||||
@@ -59,7 +59,7 @@ services:
|
||||
# Elasticsearch. Ignored on subsequent runs.
|
||||
ELASTIC_PASSWORD: ${ELASTIC_PASSWORD:-}
|
||||
# Use single node discovery in order to disable production mode and avoid bootstrap checks.
|
||||
# see: https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html
|
||||
# see: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/bootstrap-checks.html
|
||||
discovery.type: single-node
|
||||
networks:
|
||||
- elk
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
# https://www.docker.elastic.co/
|
||||
FROM docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
# Add your elasticsearch plugins setup here
|
||||
# Example: RUN elasticsearch-plugin install analysis-icu
|
||||
|
||||
@@ -1,12 +1,15 @@
|
||||
---
|
||||
## Default Elasticsearch configuration from Elasticsearch base image.
|
||||
## https://github.com/elastic/elasticsearch/blob/main/distribution/docker/src/docker/config/elasticsearch.yml
|
||||
## https://github.com/elastic/elasticsearch/blob/7.17/distribution/docker/src/docker/config/elasticsearch.yml
|
||||
#
|
||||
cluster.name: docker-cluster
|
||||
network.host: 0.0.0.0
|
||||
|
||||
## X-Pack settings
|
||||
## see https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html
|
||||
## see https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-settings.html
|
||||
#
|
||||
xpack.license.self_generated.type: trial
|
||||
xpack.security.enabled: true
|
||||
# The API key service is required by Fleet, but disabled by default when the
|
||||
# Elasticsearch API is not served over TLS.
|
||||
xpack.security.authc.api_key.enabled: true
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
FROM untergeek/curator:8.0.10
|
||||
FROM untergeek/curator:7.0.1
|
||||
|
||||
USER root
|
||||
|
||||
|
||||
@@ -17,4 +17,4 @@ All configuration files are available in the `config/` directory.
|
||||
|
||||
## Documentation
|
||||
|
||||
[Curator Reference](https://www.elastic.co/guide/en/elasticsearch/client/curator/current/index.html)
|
||||
[Curator Reference](https://www.elastic.co/guide/en/elasticsearch/client/curator/7.0/index.html)
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Curator configuration
|
||||
# https://www.elastic.co/guide/en/elasticsearch/client/curator/current/configfile.html
|
||||
# https://www.elastic.co/guide/en/elasticsearch/client/curator/7.0/configfile.html
|
||||
|
||||
elasticsearch:
|
||||
client:
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
# https://www.docker.elastic.co/
|
||||
FROM docker.elastic.co/enterprise-search/enterprise-search:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/enterprise-search/enterprise-search:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
@@ -55,7 +55,7 @@ xpack.security.authc.api_key.enabled: true
|
||||
|
||||
### Configure the Enterprise Search host in Kibana
|
||||
|
||||
Kibana acts as the [management interface][enterprisesearch-kb] to Enterprise Search.
|
||||
Kibana acts as the [management interface][enterprisesearch-ui] to Enterprise Search.
|
||||
|
||||
To enable the management experience for Enterprise Search, modify the Kibana configuration file in
|
||||
[`kibana/config/kibana.yml`][config-kbn] and add the following setting:
|
||||
@@ -132,13 +132,13 @@ Docker container: [Running Enterprise Search Using Docker][enterprisesearch-dock
|
||||
|
||||
[config-enterprisesearch]: ./config/enterprise-search.yml
|
||||
|
||||
[enterprisesearch-encryption]: https://www.elastic.co/guide/en/enterprise-search/current/encryption-keys.html
|
||||
[enterprisesearch-security]: https://www.elastic.co/guide/en/workplace-search/current/workplace-search-security.html
|
||||
[enterprisesearch-config]: https://www.elastic.co/guide/en/enterprise-search/current/configuration.html
|
||||
[enterprisesearch-docker]: https://www.elastic.co/guide/en/enterprise-search/current/docker.html
|
||||
[enterprisesearch-docs]: https://www.elastic.co/guide/en/enterprise-search/current/index.html
|
||||
[enterprisesearch-kb]: https://www.elastic.co/guide/en/kibana/current/enterprise-search-settings-kb.html
|
||||
[enterprisesearch-encryption]: https://www.elastic.co/guide/en/enterprise-search/7.17/encryption-keys.html
|
||||
[enterprisesearch-security]: https://www.elastic.co/guide/en/workplace-search/7.17/workplace-search-security.html
|
||||
[enterprisesearch-config]: https://www.elastic.co/guide/en/enterprise-search/7.17/configuration.html
|
||||
[enterprisesearch-docker]: https://www.elastic.co/guide/en/enterprise-search/7.17/docker.html
|
||||
[enterprisesearch-docs]: https://www.elastic.co/guide/en/enterprise-search/7.17/index.html
|
||||
[enterprisesearch-ui]: https://www.elastic.co/guide/en/enterprise-search/7.17/user-interfaces.html
|
||||
|
||||
[es-security]: https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#api-key-service-settings
|
||||
[es-security]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-settings.html#api-key-service-settings
|
||||
[config-es]: ../../elasticsearch/config/elasticsearch.yml
|
||||
[config-kbn]: ../../kibana/config/kibana.yml
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
---
|
||||
## Enterprise Search core configuration
|
||||
## https://www.elastic.co/guide/en/enterprise-search/current/configuration.html
|
||||
## https://www.elastic.co/guide/en/enterprise-search/7.17/configuration.html
|
||||
#
|
||||
|
||||
## --------------------- REQUIRED ---------------------
|
||||
|
||||
@@ -1,3 +1,3 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
FROM docker.elastic.co/beats/filebeat:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/beats/filebeat:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
@@ -35,8 +35,8 @@ container: [Run Filebeat on Docker][filebeat-docker].
|
||||
|
||||
[Filebeat documentation][filebeat-doc]
|
||||
|
||||
[filebeat-config]: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-reference-yml.html
|
||||
[filebeat-docker]: https://www.elastic.co/guide/en/beats/filebeat/current/running-on-docker.html
|
||||
[filebeat-doc]: https://www.elastic.co/guide/en/beats/filebeat/current/index.html
|
||||
[filebeat-config]: https://www.elastic.co/guide/en/beats/filebeat/7.17/filebeat-reference-yml.html
|
||||
[filebeat-docker]: https://www.elastic.co/guide/en/beats/filebeat/7.17/running-on-docker.html
|
||||
[filebeat-doc]: https://www.elastic.co/guide/en/beats/filebeat/7.17/index.html
|
||||
|
||||
[setup]: ../../README.md#how-to-re-execute-the-setup
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
## Filebeat configuration
|
||||
## https://github.com/elastic/beats/blob/main/deploy/docker/filebeat.docker.yml
|
||||
## https://github.com/elastic/beats/blob/7.17/deploy/docker/filebeat.docker.yml
|
||||
#
|
||||
|
||||
name: filebeat
|
||||
@@ -46,7 +46,7 @@ output.elasticsearch:
|
||||
password: ${FILEBEAT_INTERNAL_PASSWORD}
|
||||
|
||||
## HTTP endpoint for health checking
|
||||
## https://www.elastic.co/guide/en/beats/filebeat/current/http-endpoint.html
|
||||
## https://www.elastic.co/guide/en/beats/filebeat/7.17/http-endpoint.html
|
||||
#
|
||||
|
||||
http:
|
||||
|
||||
@@ -12,7 +12,7 @@ services:
|
||||
- -e
|
||||
# Disable config file permissions checks. Allows mounting
|
||||
# 'config/filebeat.yml' even if it's not owned by root.
|
||||
# see: https://www.elastic.co/guide/en/beats/libbeat/current/config-file-permissions.html
|
||||
# see: https://www.elastic.co/guide/en/beats/libbeat/7.17/config-file-permissions.html
|
||||
- --strict.perms=false
|
||||
volumes:
|
||||
- ./extensions/filebeat/config/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro,Z
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
FROM docker.elastic.co/beats/elastic-agent:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/beats/elastic-agent:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
# Ensure the 'state' directory exists and is owned by the 'elastic-agent' user,
|
||||
# otherwise mounting a named volume in that location creates a directory owned
|
||||
|
||||
@@ -37,6 +37,9 @@ management UI: [Fleet UI Settings][fleet-cfg].
|
||||
|
||||
## Known Issues
|
||||
|
||||
- Logs are only collected within the Fleet Server's container. We would like to emulate the behaviour of the existing
|
||||
Filebeat extension, and collect logs from all ELK containers out-of-the-box. Unfortunately, this use-case is only
|
||||
supported starting with the version 8.x of the Elastic stack.
|
||||
- The Elastic Agent auto-enrolls using the `elastic` super-user. With this approach, you do not need to generate a
|
||||
service token — either using the Fleet management UI or [CLI utility][es-svc-token] — prior to starting this
|
||||
extension. However convenient that is, this approach _does not follow security best practices_, and we recommend
|
||||
@@ -53,10 +56,10 @@ management UI: [Fleet UI Settings][fleet-cfg].
|
||||
|
||||
|
||||
[fleet-doc]: https://www.elastic.co/guide/en/fleet/current/fleet-overview.html
|
||||
[fleet-pol]: https://www.elastic.co/guide/en/fleet/current/agent-policy.html
|
||||
[fleet-cfg]: https://www.elastic.co/guide/en/fleet/current/fleet-settings.html
|
||||
[fleet-doc]: https://www.elastic.co/guide/en/fleet/7.17/fleet-overview.html
|
||||
[fleet-pol]: https://www.elastic.co/guide/en/fleet/7.17/agent-policy.html
|
||||
[fleet-cfg]: https://www.elastic.co/guide/en/fleet/7.17/fleet-settings.html
|
||||
|
||||
[config-kbn]: ../../kibana/config/kibana.yml
|
||||
|
||||
[es-svc-token]: https://www.elastic.co/guide/en/elasticsearch/reference/current/service-tokens-command.html
|
||||
[es-svc-token]: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/service-tokens-command.html
|
||||
|
||||
@@ -4,15 +4,10 @@ services:
|
||||
context: extensions/fleet/
|
||||
args:
|
||||
ELASTIC_VERSION: ${ELASTIC_VERSION}
|
||||
# Run as 'root' instead of 'elastic-agent' (uid 1000) to allow reading
|
||||
# 'docker.sock' and the host's filesystem.
|
||||
# Run as 'root' instead of 'elastic-agent' (uid 1000) to allow reading 'docker.sock'.
|
||||
user: root
|
||||
volumes:
|
||||
- fleet-server:/usr/share/elastic-agent/state:Z
|
||||
- type: bind
|
||||
source: /var/lib/docker/containers
|
||||
target: /var/lib/docker/containers
|
||||
read_only: true
|
||||
- type: bind
|
||||
source: /var/run/docker.sock
|
||||
target: /var/run/docker.sock
|
||||
|
||||
@@ -1,3 +1,3 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
FROM docker.elastic.co/beats/heartbeat:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/beats/heartbeat:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
@@ -34,8 +34,8 @@ Docker container: [Run Heartbeat on Docker][heartbeat-docker].
|
||||
|
||||
[Heartbeat documentation][heartbeat-doc]
|
||||
|
||||
[heartbeat-config]: https://www.elastic.co/guide/en/beats/heartbeat/current/heartbeat-reference-yml.html
|
||||
[heartbeat-docker]: https://www.elastic.co/guide/en/beats/heartbeat/current/running-on-docker.html
|
||||
[heartbeat-doc]: https://www.elastic.co/guide/en/beats/heartbeat/current/index.html
|
||||
[heartbeat-config]: https://www.elastic.co/guide/en/beats/heartbeat/7.17/heartbeat-reference-yml.html
|
||||
[heartbeat-docker]: https://www.elastic.co/guide/en/beats/heartbeat/7.17/running-on-docker.html
|
||||
[heartbeat-doc]: https://www.elastic.co/guide/en/beats/heartbeat/7.17/index.html
|
||||
|
||||
[setup]: ../../README.md#how-to-re-execute-the-setup
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
## Heartbeat configuration
|
||||
## https://github.com/elastic/beats/blob/main/deploy/docker/heartbeat.docker.yml
|
||||
## https://github.com/elastic/beats/blob/7.17/deploy/docker/heartbeat.docker.yml
|
||||
#
|
||||
|
||||
name: heartbeat
|
||||
@@ -32,7 +32,7 @@ output.elasticsearch:
|
||||
password: ${HEARTBEAT_INTERNAL_PASSWORD}
|
||||
|
||||
## HTTP endpoint for health checking
|
||||
## https://www.elastic.co/guide/en/beats/heartbeat/current/http-endpoint.html
|
||||
## https://www.elastic.co/guide/en/beats/heartbeat/7.17/http-endpoint.html
|
||||
#
|
||||
|
||||
http:
|
||||
|
||||
@@ -9,7 +9,7 @@ services:
|
||||
- -e
|
||||
# Disable config file permissions checks. Allows mounting
|
||||
# 'config/heartbeat.yml' even if it's not owned by root.
|
||||
# see: https://www.elastic.co/guide/en/beats/libbeat/current/config-file-permissions.html
|
||||
# see: https://www.elastic.co/guide/en/beats/libbeat/7.17/config-file-permissions.html
|
||||
- --strict.perms=false
|
||||
volumes:
|
||||
- ./extensions/heartbeat/config/heartbeat.yml:/usr/share/heartbeat/heartbeat.yml:ro,Z
|
||||
|
||||
@@ -1,3 +1,3 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
FROM docker.elastic.co/beats/metricbeat:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/beats/metricbeat:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
@@ -42,8 +42,8 @@ Docker container: [Run Metricbeat on Docker][metricbeat-docker].
|
||||
|
||||
|
||||
[metricbeat-config]: https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-reference-yml.html
|
||||
[metricbeat-docker]: https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-docker.html
|
||||
[metricbeat-doc]: https://www.elastic.co/guide/en/beats/metricbeat/current/index.html
|
||||
[metricbeat-config]: https://www.elastic.co/guide/en/beats/metricbeat/7.17/metricbeat-reference-yml.html
|
||||
[metricbeat-docker]: https://www.elastic.co/guide/en/beats/metricbeat/7.17/running-on-docker.html
|
||||
[metricbeat-doc]: https://www.elastic.co/guide/en/beats/metricbeat/7.17/index.html
|
||||
|
||||
[setup]: ../../README.md#how-to-re-execute-the-setup
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
## Metricbeat configuration
|
||||
## https://github.com/elastic/beats/blob/main/deploy/docker/metricbeat.docker.yml
|
||||
## https://github.com/elastic/beats/blob/7.17/deploy/docker/metricbeat.docker.yml
|
||||
#
|
||||
|
||||
name: metricbeat
|
||||
@@ -15,9 +15,6 @@ metricbeat.autodiscover:
|
||||
- type: docker
|
||||
hints.enabled: true
|
||||
|
||||
# With all the modules below enabled, we exceed the default limit of 10000 fields.
|
||||
setup.template.settings.index.mapping.total_fields.limit: 10200
|
||||
|
||||
metricbeat.modules:
|
||||
- module: elasticsearch
|
||||
hosts: [ http://elasticsearch:9200 ]
|
||||
@@ -67,7 +64,7 @@ output.elasticsearch:
|
||||
password: ${METRICBEAT_INTERNAL_PASSWORD}
|
||||
|
||||
## HTTP endpoint for health checking
|
||||
## https://www.elastic.co/guide/en/beats/metricbeat/current/http-endpoint.html
|
||||
## https://www.elastic.co/guide/en/beats/metricbeat/7.17/http-endpoint.html
|
||||
#
|
||||
|
||||
http:
|
||||
|
||||
@@ -12,7 +12,7 @@ services:
|
||||
- -e
|
||||
# Disable config file permissions checks. Allows mounting
|
||||
# 'config/metricbeat.yml' even if it's not owned by root.
|
||||
# see: https://www.elastic.co/guide/en/beats/libbeat/current/config-file-permissions.html
|
||||
# see: https://www.elastic.co/guide/en/beats/libbeat/7.17/config-file-permissions.html
|
||||
- --strict.perms=false
|
||||
# Mount point of the host’s filesystem. Required to monitor the host
|
||||
# from within a container.
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
# https://www.docker.elastic.co/
|
||||
FROM docker.elastic.co/kibana/kibana:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/kibana/kibana:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
# Add your kibana plugins setup here
|
||||
# Example: RUN kibana-plugin install <name|url>
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
---
|
||||
## Default Kibana configuration from Kibana base image.
|
||||
## https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/templates/kibana_yml.template.ts
|
||||
## https://github.com/elastic/kibana/blob/7.17/src/dev/build/tasks/os_packages/docker_generator/templates/kibana_yml.template.ts
|
||||
#
|
||||
server.name: kibana
|
||||
server.host: 0.0.0.0
|
||||
@@ -17,18 +17,18 @@ elasticsearch.password: ${KIBANA_SYSTEM_PASSWORD}
|
||||
## Encryption keys (optional but highly recommended)
|
||||
##
|
||||
## Generate with either
|
||||
## $ docker container run --rm docker.elastic.co/kibana/kibana:8.6.2 bin/kibana-encryption-keys generate
|
||||
## $ docker container run --rm docker.elastic.co/kibana/kibana:7.17.9 bin/kibana-encryption-keys generate
|
||||
## $ openssl rand -hex 32
|
||||
##
|
||||
## https://www.elastic.co/guide/en/kibana/current/using-kibana-with-security.html
|
||||
## https://www.elastic.co/guide/en/kibana/current/kibana-encryption-keys.html
|
||||
## https://www.elastic.co/guide/en/kibana/7.17/using-kibana-with-security.html
|
||||
## https://www.elastic.co/guide/en/kibana/7.17/kibana-encryption-keys.html
|
||||
#
|
||||
#xpack.security.encryptionKey:
|
||||
#xpack.encryptedSavedObjects.encryptionKey:
|
||||
#xpack.reporting.encryptionKey:
|
||||
|
||||
## Fleet
|
||||
## https://www.elastic.co/guide/en/kibana/current/fleet-settings-kb.html
|
||||
## https://www.elastic.co/guide/en/kibana/7.17/fleet-settings-kb.html
|
||||
#
|
||||
xpack.fleet.agents.fleet_server.hosts: [ http://fleet-server:8220 ]
|
||||
|
||||
@@ -38,7 +38,6 @@ xpack.fleet.outputs:
|
||||
type: elasticsearch
|
||||
hosts: [ http://elasticsearch:9200 ]
|
||||
is_default: true
|
||||
is_default_monitoring: true
|
||||
|
||||
xpack.fleet.packages:
|
||||
- name: fleet_server
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
# https://www.docker.elastic.co/
|
||||
FROM docker.elastic.co/logstash/logstash:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/logstash/logstash:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
# Add your logstash plugins setup here
|
||||
# Example: RUN logstash-plugin install logstash-filter-json
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
---
|
||||
## Default Logstash configuration from Logstash base image.
|
||||
## https://github.com/elastic/logstash/blob/main/docker/data/logstash/config/logstash-full.yml
|
||||
## https://github.com/elastic/logstash/blob/7.17/docker/data/logstash/config/logstash-full.yml
|
||||
#
|
||||
http.host: 0.0.0.0
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
ARG ELASTIC_VERSION
|
||||
|
||||
# https://www.docker.elastic.co/
|
||||
FROM docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION:-8.15.2}
|
||||
FROM docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION:-7.17.24}
|
||||
|
||||
ENTRYPOINT ["/entrypoint.sh"]
|
||||
|
||||
@@ -8,6 +8,7 @@
|
||||
{
|
||||
"names": [
|
||||
".monitoring-*-mb",
|
||||
".monitoring-*-mb-*",
|
||||
"metricbeat-*"
|
||||
],
|
||||
"privileges": [
|
||||
|
||||
Reference in New Issue
Block a user