Различия

Показаны различия между двумя версиями страницы.

--- service:efk [10.06.2024 19:20] – [Fluentd] viacheslav
+++ service:efk [30.07.2024 19:21] (текущий) – внешнее изменение 127.0.0.1
@@ Строка 1: / Строка 1: @@
+====== Elasticsearch ======
+Getting started with the Elastic Stack and Docker Compose: [[https://www.elastic.co/blog/getting-started-with-the-elastic-stack-and-docker-compose|part 1]] ([[https://github.com/elkninja/elastic-stack-docker-part-one|git]]), [[https://www.elastic.co/blog/getting-started-with-the-elastic-stack-and-docker-compose-part-2|part 2]] ([[https://github.com/elkninja/elastic-stack-docker-part-two|git]]).\\
+🎞️ [[https://www.youtube.com/watch?v=HOmq3STxAKg|Install Elasticsearch + Kibana 8.x with TLS/SSL]]\\
 ====== Fluentd ======
 https://docs.fluentd.org/configuration\\
 https://hub.docker.com/r/fluent/fluentd/
+====== Kibana ======
+[[https://www.elastic.co/guide/en/kibana/current/docker.html|Install Kibana with Docker]]\\
+Кибана настраивается через переменные окружения соответственно [[https://www.elastic.co/guide/en/kibana/current/settings.html|параметрам в kibana.yml]], с капитализацией и заменой точек на подчёркивания в параметрах:
+^Environment Variable ^Kibana Setting ^
+|SERVER_NAME |server.name |
+|SERVER_BASEPATH |server.basePath |
+|ELASTICSEARCH_HOSTS |elasticsearch.hosts |
+и т. д.
+===== HTTPS =====
+<code bash>
+# Сконвертировать исходный сторонний .pfx в .crt/.key
+openssl pkcs12 -in /tmp/source.pfx -clcerts -nokeys -out /efk/certs/kibana.crt
+openssl pkcs12 -in /tmp/source.pfx -nocerts -nodes -out /efk/certs/kibana.key
+</code>
+https://tipoit.kz/elk-install-kibana
+<code yaml>
+  kibana:
+    depends_on:
+      es01:
+        condition: service_healthy
+    image: kibana:${STACK_VERSION}
+    labels:
+      co.elastic.logs/module: kibana
+    volumes:
+      - ./certs:/usr/share/kibana/config/certs
+      - ./kibanadata:/usr/share/kibana/data
+      - ./kibana.yml:/usr/share/kibana/config/kibana.yml:ro
+    ports:
+      - ${KIBANA_PORT}:5601
+    environment:
+      - SERVERNAME=kibana
+      - ELASTICSEARCH_HOSTS=https://es01:9200
+      - ELASTICSEARCH_USERNAME=kibana_system
+      - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD}
+      - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=config/certs/ca/ca.crt
+      - XPACK_SECURITY_ENCRYPTIONKEY=${ENCRYPTION_KEY}
+      - XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY=${ENCRYPTION_KEY}
+      - XPACK_REPORTING_ENCRYPTIONKEY=${ENCRYPTION_KEY}
+      - XPACK_REPORTING_KIBANASERVER_HOSTNAME=localhost
+      - SERVER_SSL_ENABLED=true
+      - SERVER_SSL_CERTIFICATE=config/certs/kibana/kibana.crt
+      - SERVER_SSL_KEY=config/certs/kibana/kibana.key
+      - SERVER_SSL_CERTIFICATEAUTHORITIES=config/certs/ca/ca.crt
+    mem_limit: ${KB_MEM_LIMIT}
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "curl -I -s --cacert config/certs/ca/ca.crt https://localhost:5601 | grep -q 'HTTP/1.1 302 Found'",
+        ]
+      interval: 10s
+      timeout: 10s
+      retries: 120
+</code>
+https://github.com/elkninja/elastic-stack-docker-part-two/blob/main/docker-compose.yml
 ===== Конфигурация =====
 Этапы прохождения логов во Флюенте:\\
@@ Строка 10: / Строка 74: @@
 ====== Литература ======
+Docker logging: https://www.fluentd.org/guides/recipes/docker-logging\\
 Как настроить централизованное логирование для Docker Swarm с помощью Fluentd: https://cloud.vk.com/docs/cases/cases-logs/case-swarm\\
-Docker Fluentd logging driver: https://docs.docker.com/config/containers/logging/fluentd/\\
 Better Log Parsing with Fluentd: https://work.haufegroup.io/fluentd-log-parsing/\\
 Docker Setup Monitoring: https://www.frederikbanke.com/docker-setup-monitoring/\\
+Настройка централизованного логирования в Docker с применением EFK Stack: https://daffin.ru/devops/docker/efk/\\
+[[https://www.youtube.com/playlist?list=PLPatHYWw1RVuaGUCZoqEnoqkxLed2jr-u|Elasticsearch + Docker-compose]], также см. весь канал\\