From 7bb2955c80713d859f2f20ebdb2d1102dc0ac7ad Mon Sep 17 00:00:00 2001
From: bivashy <botyrbojey@gmail.com>
Date: Sun, 14 Sep 2025 01:57:12 +0500
Subject: [PATCH] Initial commit

---
 compose.yml            | 54 ++++++++++++++++++++++++++++++++++++++++++
 logstash/logstash.conf | 18 ++++++++++++++
 logstash/logstash.yml  |  4 ++++
 3 files changed, 76 insertions(+)
 create mode 100644 compose.yml
 create mode 100644 logstash/logstash.conf
 create mode 100644 logstash/logstash.yml

diff --git a/compose.yml b/compose.yml
new file mode 100644
index 0000000..b61975b
--- /dev/null
+++ b/compose.yml
@@ -0,0 +1,54 @@
+services:
+  elasticsearch:
+    image: elasticsearch:8.17.1
+    container_name: elasticsearch
+    restart: always
+    volumes:
+      - elastic_data:/usr/share/elasticsearch/data/
+    environment:
+      - xpack.security.enabled=true
+      - ES_JAVA_OPTS=-Xmx1028m -Xms1028m
+      - discovery.type=single-node
+    ports:
+      - "9200:9200"
+    networks:
+      - elk-network
+
+  logstash:
+    image: logstash:8.17.1
+    container_name: logstash
+    restart: always
+    volumes:
+      - ./logstash/:/logstash_dir
+      - ./logstash/logstash.yml:/usr/share/logstash/config/logstash.yml
+    command: logstash -f /logstash_dir/logstash.conf
+    depends_on:
+      - elasticsearch
+    ports:
+      - "5044:5044"
+    environment:
+      - LS_JAVA_OPTS=-Xmx1028m -Xms1028m
+    networks:
+      - elk-network
+
+  kibana:
+    image: kibana:8.17.1
+    container_name: kibana
+    restart: always
+    ports:
+      - "5601:5601"
+    environment:
+      - ELASTICSEARCH_URL=http://elasticsearch:9200
+      - ELASTICSEARCH_USERNAME=kibana_system
+      - ELASTICSEARCH_PASSWORD=kibanapass
+    depends_on:
+      - elasticsearch
+    networks:
+      - elk-network
+
+networks:
+  elk-network:
+    external: true
+
+volumes:
+  elastic_data: {}
diff --git a/logstash/logstash.conf b/logstash/logstash.conf
new file mode 100644
index 0000000..4eb16b3
--- /dev/null
+++ b/logstash/logstash.conf
@@ -0,0 +1,18 @@
+input {
+  tcp {
+    port => 5044
+    codec => json_lines
+  }
+}
+
+output {
+  elasticsearch {
+    hosts => ["http://elasticsearch:9200"]
+    user => "logstash_main"
+    password => "logstashpass"
+    index => "logs-%{+YYYY.MM.dd}"
+  }
+  stdout {
+    codec => rubydebug
+  }
+}
diff --git a/logstash/logstash.yml b/logstash/logstash.yml
new file mode 100644
index 0000000..b82e473
--- /dev/null
+++ b/logstash/logstash.yml
@@ -0,0 +1,4 @@
+xpack.monitoring.enabled: true
+xpack.monitoring.elasticsearch.hosts: ["http://elasticsearch:9200"]
+xpack.monitoring.elasticsearch.username: "logstash_system"
+xpack.monitoring.elasticsearch.password: "logstashpass"