Elk (Elastisearch Logstash Kibana)

Installation

• wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -
• echo "deb https://artifacts.elastic.co/packages/6.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-6.x.list
• apt update
• apt -y install elasticsearch kibana logstash default-jre geoip-database

Systemd Services

• systemctl daemon-reload
• systemctl enable kibana.service
• systemctl enable elasticsearch.service
• systemctl enable logstash.service

Links

• https://www.howtoforge.com/tutorial/suricata-with-elk-and-web-front-ends-on-ubuntu-bionic-beaver-1804-lts/
• https://www.linux-magazin.de/ausgaben/2016/02/elk-stack/