Overview

ELK stack by elastic is monitoring and log filtering tool defined by:

• Elasticsearch
• Logstash
• Kibana

So our architecture will looks as follows:

Let's get started with basic configuration:

• Setting Up Elasticsearch with Kibana
• Elasticsearch Password Reset
• Configuring Logstash
• Enable SSL/TLS for Kibana
• Cluster Configuration

All three components however are server side. Even though Kibana can be configured without an agent, it is always good idea include one. In that regard, we can safely add:

• Filebeat
• Configure GeoIP for FIlebeat