Discussion :

[pcouas]

Bonjour

J'ai installé un Kibana sous Docker avec logstash et lorsque j"accede à la page status de Kibana, j'ai le status Green et status "breakdown" ?
J'ai checker mon fichier de conf logstash il semble Ok et mon serveur tomcat envoi bien les logs.
Que veux dire status green et breakdown simultanement ?
Les logs de mon tomcat semble pourtant detecté ?

[ded703]

Hello,

Très intéressant ton implémentation avec ELK et Docker , peux tu me dire comment as tu effectuer la configuration ?

T'es tu basé sur l'image de sebp/elk ?

Eric

[pcouas]

Bonjour
Mon dockerFile actuel, comme je travail dessus il y a encore des lignes commenté que je dois supprmer

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
FROM openjdk:jre-alpine


#doit etre mis en premier  
#RUN apk update && apk add bash
#RUN apk add --no-cache bash
#RUN /bin/sh -c "apk add --no-cache bash"
#RUN apk add --update bash && rm -rf /var/cache/apk/*
#RUN apk add --no-cache bash libstdc++
# pour logstash libc6-compat libzmq
RUN apk add --no-cache bash libstdc++ libc6-compat libzmq

LABEL maintainer "nshou <nshou@coronocoya.net>"

#memoire necessaire a ELK
RUN echo 'vm.max_map_count=262144' >> /etc/sysctl.conf

ENV ES_VERSION=5.4.3 \
    KIBANA_VERSION=5.4.3

RUN apk add --quiet --no-progress --no-cache nodejs wget \
 && adduser -D elasticsearch

USER elasticsearch

WORKDIR /home/elasticsearch

#en bash pas sh ajout alias 
RUN echo 'alias ll="ls -l"' >> ~/.bashrc

RUN wget -q -O - https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-${ES_VERSION}.tar.gz \
 |  tar -zx \
 && mv elasticsearch-${ES_VERSION} elasticsearch \
 && wget -q -O - https://artifacts.elastic.co/downloads/kibana/kibana-${KIBANA_VERSION}-linux-x86_64.tar.gz \
 |  tar -zx \
 && mv kibana-${KIBANA_VERSION}-linux-x86_64 kibana \
 && rm -f kibana/node/bin/node kibana/node/bin/npm \
 && ln -s $(which node) kibana/node/bin/node \
 && ln -s $(which npm) kibana/node/bin/npm
 
 
# Install tomcat pour test
ENV TOMCATVER 7.0.79
 
RUN (wget -O /tmp/tomcat7.tar.gz http://archive.apache.org/dist/tomcat/tomcat-7/v${TOMCATVER}/bin/apache-tomcat-${TOMCATVER}.tar.gz && \
  tar zxf /tmp/tomcat7.tar.gz && \
  mv apache-tomcat* tomcat && \
  rm /tmp/tomcat7.tar.gz)
  
#  RUN mv /etc/cron.daily/logrotate /etc/cron.hourly/logrotate
#ADD logrotate /etc/logrotate.d/tomcat7
#RUN chmod 644 /etc/logrotate.d/tomcat7
  

# Install logstash  
ENV LOGSTASH_VERSION 5.4.3  

RUN wget https://artifacts.elastic.co/downloads/logstash/logstash-${LOGSTASH_VERSION}.tar.gz && \
tar xvzf logstash-${LOGSTASH_VERSION}.tar.gz && \
rm -f logstash-${LOGSTASH_VERSION}.tar.gz && \
chown -R elasticsearch:elasticsearch logstash-${LOGSTASH_VERSION}

#plugins 
#RUN logstash-${LOGSTASH_VERSION}/bin/logstash-plugin update logstash-filter-grok

# logstash.conf and Dockerfile are on same location
#ngnix port 5000
RUN mkdir confLogs
#test1
#ADD confLogs/logstash.conf /home/elasticsearch/confLogs
#test2 ok
ADD confLogs/conf3_tomcat.conf confLogs/logstash.conf
ADD confLogs/patterns_local3 /home/elasticsearch/confLogs/patterns
#le pattern JAVA
ADD confLogs/patterns_autre /home/elasticsearch/confLogs/patterns
#pas de soucis kibana statut
#docker logs 
#ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console.
#Sending Logstash's logs to /home/elasticsearch/logstash-5.4.2/logs which is now configured via log4j2.properties
# Status Breakdown green
#
#test3
#ADD confLogs/patterns_local /home/elasticsearch/confLogs/patterns
#ADD confLogs/logstash_tomcatlocal.conf /home/elasticsearch/confLogs/logstash.conf
#test4
#ADD confLogs/logstach_tomcatlocal2.conf /home/elasticsearch/confLogs/logstash.conf 
# pose pb avec les exmples
#ADD confLogs/server2.xml /home/elasticsearch/tomcat/conf/server.xml
#test5
#ADD confLogs/logstash_tomcatlocal3.conf /home/elasticsearch/confLogs/logstash.conf 
#ADD confLogs/patterns_local3 /home/elasticsearch/confLogs/patterns
#
#ADD confLogs/conf4_tomcat.conf confLogs/logstash.conf

#test AF
RUN mkdir mqemmo_logs
ADD confLogs/AFLOGS/prd_qvipnapplx01 static_logs
ADD confLogs/AFLOGS/prd_qvipnapplx02 static_logs


#
#le bom final doit etre logstash.conf car il est mis au demarrage de logstash


CMD sh elasticsearch/bin/elasticsearch -E http.host=0.0.0.0 --quiet & tomcat/bin/catalina.sh start & logstash-${LOGSTASH_VERSION}/bin/logstash -f confLogs/logstash.conf --verbose & kibana/bin/kibana --host 0.0.0.0 -Q

#CMD sh elasticsearch/bin/elasticsearch -E http.host=127.0.0.1 --quiet & tomcat/bin/catalina.sh start & logstash-${LOGSTASH_VERSION}/bin/logstash -f confLogs/logstash.conf --verbose & kibana/bin/kibana --host 0.0.0.0 -Q
#CMD sh elasticsearch/bin/elasticsearch -E http.host=0.0.0.0 --network.host 127.0.0.1 --quiet & tomcat/bin/catalina.sh start & logstash-${LOGSTASH_VERSION}/bin/logstash -f confLogs/logstash.conf --verbose & kibana/bin/kibana --host 0.0.0.0 -Q






EXPOSE 9200 5601 8080