{"id":6605,"date":"2018-02-08T15:29:44","date_gmt":"2018-02-08T20:29:44","guid":{"rendered":"http:\/\/appcrawler.com\/wordpress\/?p=6605"},"modified":"2018-02-09T15:04:33","modified_gmt":"2018-02-09T20:04:33","slug":"elk-simple-poc","status":"publish","type":"post","link":"http:\/\/appcrawler.com\/wordpress\/2018\/02\/08\/elk-simple-poc\/","title":{"rendered":"ELK simple POC"},"content":{"rendered":"<p>I tried using the getting started guide, and knew I was in trouble when they had me downloading shakespeare.json.  Why does every IT person think that other IT people are &#8220;cultured&#8221; and would be interested in Shakespeare as a datasource for a POC?<\/p>\n<p>Regardless, like most people doing such a POC, I have a \/var\/log\/messages file I would like to index.  This POC does that.<\/p>\n<pre>\r\n[root@cmhlcarchapp01 elasticsearch-1.5.2]# bin\/elasticsearch -d\r\n<\/pre>\n<pre>\r\n[root@cmhlcarchapp01 logstash-1.5.0]# cat conf\/logstash.conf\r\ninput {\r\n  file {\r\n    type => \"logstash\"\r\n    path => \"\/var\/log\/messages\"\r\n  }\r\n}\r\noutput {\r\n  elasticsearch {\r\n    host => localhost\r\n  }\r\n}\r\n[root@cmhlcarchapp01 logstash-1.5.0]# bin\/logstash -f conf\/logstash.conf\r\n<\/pre>\n<pre>\r\n[root@cmhlcarchapp01 logstash-1.5.0]# bin\/kibana\r\n<\/pre>\n<p>After doing this, I found entries being indexed after a while as shown below&#8230;<\/p>\n<p><img alt=''i class='alignnone size-full wp-image-6607 ' src='http:\/\/appcrawler.com\/wordpress\/wp-content\/uploads\/2018\/01\/img_5a67e9fa6dc66.png' \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I tried using the getting started guide, and knew I was in trouble when they had me downloading shakespeare.json. Why does every IT person think that other IT people are &#8220;cultured&#8221; and would be interested in Shakespeare as a datasource&hellip;<\/p>\n<p class=\"more-link-p\"><a class=\"more-link\" href=\"http:\/\/appcrawler.com\/wordpress\/2018\/02\/08\/elk-simple-poc\/\">Read more &rarr;<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[90,92],"tags":[],"_links":{"self":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts\/6605"}],"collection":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/comments?post=6605"}],"version-history":[{"count":3,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts\/6605\/revisions"}],"predecessor-version":[{"id":6642,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts\/6605\/revisions\/6642"}],"wp:attachment":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/media?parent=6605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/categories?post=6605"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/tags?post=6605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}