How to Install ELK Stack (Elasticsearch, Logstash and Kibana) on CentOS 7 / RHEL 7

You may also like...

2 Responses

  1. shashank says:

    Nice article. Thanks. But we are facing one problem. The filebeat is not sending the logs to Logstash as logs changes at client . We need to restart the filebeat every time on client to send the logs. Is there any setting which defines auto sending of Logs or time-interval at which file beat sends the logs ?

    • Hi Shashank,

      You need to edit your client’s filebeat.yml file. Update the entries whatever we discuss in document and also make sure you comment out the following lines in filebeat.yml

      ### Elasticsearch as output
      #elasticsearch:

      #hosts: [“localhost:9200”]

      Restart the filebeat service on client and then restart logstash service on elk server. To perform testing logout from your client and then re-login and verify the logs on Kibana, Logs should be updated for your client.

Leave a Reply

Your email address will not be published. Required fields are marked *