ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    SysLog Forwarding for XenServer

    Scheduled Pinned Locked Moved IT Discussion
    rsyslogxenserverloggingkibanaelkelasticsearch
    110 Posts 10 Posters 24.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller @DustinB3403
      last edited by

      @DustinB3403 said in SysLog Forwarding for XenServer:

      @scottalanmiller This one, correct?

      Yes

      1 Reply Last reply Reply Quote 0
      • BRRABillB
        BRRABill
        last edited by

        Let me know how it goes. I'd love to install another free server around here.

        TAKE THAT MICROSOFT!

        1 Reply Last reply Reply Quote 1
        • DustinB3403D
          DustinB3403
          last edited by

          I'm getting stuck at

            ./load.sh
          

          with

          Loading dashboards to http://localhost:9200 in .kibana
          Loading search Cache-transactions:
          curl: (7) Failed connect to localhost:9200; Connection timed out
          
          1 Reply Last reply Reply Quote 0
          • DustinB3403D
            DustinB3403
            last edited by

            You know if I wasn't tired I would've noticed that @scottalanmiller made that a bash file.......

            1 Reply Last reply Reply Quote 1
            • DustinB3403D
              DustinB3403
              last edited by

              Sadly the connection timed out still......

              I might have to make a clean installation tomorrow and deal with it then. . . .

              1 Reply Last reply Reply Quote 0
              • DustinB3403D
                DustinB3403
                last edited by

                And filebeat is not able to be found...

                Ok coming back to this from my house where I can work with a beer..

                1 Reply Last reply Reply Quote 1
                • scottalanmillerS
                  scottalanmiller
                  last edited by

                  Filebeat not found where?

                  DustinB3403D 1 Reply Last reply Reply Quote 0
                  • DustinB3403D
                    DustinB3403 @scottalanmiller
                    last edited by

                    @scottalanmiller from this continuation here.

                    https://mangolassi.it/topic/8308/configuring-logstash-and-filebeat-to-send-to-elk-logging-system

                    1 Reply Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller
                      last edited by

                      But you can't find the download?

                      DustinB3403D 1 Reply Last reply Reply Quote 0
                      • DustinB3403D
                        DustinB3403 @scottalanmiller
                        last edited by

                        @scottalanmiller Correct, when I attempt to run the bash file, I'm responded with filebeat not found from any yum repository.

                        1 Reply Last reply Reply Quote 0
                        • DustinB3403D
                          DustinB3403
                          last edited by

                          I'm starting a clean installation on my personal lab to test with.

                          Should I bother with the syslog configuration before setting up Elk and LogStash?

                          1 Reply Last reply Reply Quote 0
                          • scottalanmillerS
                            scottalanmiller
                            last edited by

                            No. Get ELK up first.

                            DustinB3403D 1 Reply Last reply Reply Quote 0
                            • DustinB3403D
                              DustinB3403 @scottalanmiller
                              last edited by

                              @scottalanmiller Ok will follow your guide first, and then work on the Elk info.

                              1 Reply Last reply Reply Quote 0
                              • scottalanmillerS
                                scottalanmiller
                                last edited by

                                Yeah. That way you know it is working before you make other changes.

                                1 Reply Last reply Reply Quote 0
                                • DustinB3403D
                                  DustinB3403
                                  last edited by

                                  So for everyone looking to do this,

                                  Start here
                                  Then here

                                  And then (and @scottalanmiller I'm asking for confirmation) perform what I posted in the OP.

                                  Correct?

                                  1 Reply Last reply Reply Quote 1
                                  • DustinB3403D
                                    DustinB3403
                                    last edited by

                                    So on a brand new installation of Centos7 after completing Elk on Cent and then progressing to https://mangolassi.it/topic/8308/configuring-logstash-and-filebeat-to-send-to-elk-logging-system

                                    I get this...

                                    0_1470952896859_putty_2016-08-11_18-01-31.png

                                    1 Reply Last reply Reply Quote 0
                                    • DustinB3403D
                                      DustinB3403
                                      last edited by

                                      Same thing with sudo

                                      1 Reply Last reply Reply Quote 0
                                      • DustinB3403D
                                        DustinB3403
                                        last edited by

                                        What is missing from the second script is

                                        curl -L -O https://download.elastic.co/beats/filebeat/filebeat-1.2.3-x86_64.rpm
                                        
                                        sudo rpm -vi filebeat-1.2.3-x86_64.rpm
                                        
                                        1 Reply Last reply Reply Quote 2
                                        • DustinB3403D
                                          DustinB3403
                                          last edited by

                                          So I'm still stumped here....

                                          1 Reply Last reply Reply Quote 0
                                          • DustinB3403D
                                            DustinB3403
                                            last edited by DustinB3403

                                            Hrm, so I have a clean installation and when I go to the Elk/Logstash Web url I get a login prompt...

                                            But I haven't the slightest idea of what the username password is.

                                            Trying "kibana" and "changeme" results in the prompt asking for credentials again...

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 2 / 6
                                            • First post
                                              Last post