Initial commit

compose.yml

@@ -0,0 +1,54 @@
+services:
+  elasticsearch:
+    image: elasticsearch:8.17.1
+    container_name: elasticsearch
+    restart: always
+    volumes:
+      - elastic_data:/usr/share/elasticsearch/data/
+    environment:
+      - xpack.security.enabled=true
+      - ES_JAVA_OPTS=-Xmx1028m -Xms1028m
+      - discovery.type=single-node
+    ports:
+      - "9200:9200"
+    networks:
+      - elk-network
+
+  logstash:
+    image: logstash:8.17.1
+    container_name: logstash
+    restart: always
+    volumes:
+      - ./logstash/:/logstash_dir
+      - ./logstash/logstash.yml:/usr/share/logstash/config/logstash.yml
+    command: logstash -f /logstash_dir/logstash.conf
+    depends_on:
+      - elasticsearch
+    ports:
+      - "5044:5044"
+    environment:
+      - LS_JAVA_OPTS=-Xmx1028m -Xms1028m
+    networks:
+      - elk-network
+
+  kibana:
+    image: kibana:8.17.1
+    container_name: kibana
+    restart: always
+    ports:
+      - "5601:5601"
+    environment:
+      - ELASTICSEARCH_URL=http://elasticsearch:9200
+      - ELASTICSEARCH_USERNAME=kibana_system
+      - ELASTICSEARCH_PASSWORD=kibanapass
+    depends_on:
+      - elasticsearch
+    networks:
+      - elk-network
+
+networks:
+  elk-network:
+    external: true
+
+volumes:
+  elastic_data: {}

logstash/logstash.conf

@@ -0,0 +1,18 @@
+input {
+  tcp {
+    port => 5044
+    codec => json_lines
+  }
+}
+
+output {
+  elasticsearch {
+    hosts => ["http://elasticsearch:9200"]
+    user => "logstash_main"
+    password => "logstashpass"
+    index => "logs-%{+YYYY.MM.dd}"
+  }
+  stdout {
+    codec => rubydebug
+  }
+}

logstash/logstash.yml

@@ -0,0 +1,4 @@
+xpack.monitoring.enabled: true
+xpack.monitoring.elasticsearch.hosts: ["http://elasticsearch:9200"]
+xpack.monitoring.elasticsearch.username: "logstash_system"
+xpack.monitoring.elasticsearch.password: "logstashpass"