Erinevus lehekülje "Itx8071-graded-lab" redaktsioonide vahel

Viimane redaktsioon: 13. august 2024, kell 12:34

To be announced.

@@ 1. rida: / 1. rida: @@
-=== Description of the graded lab ===
+To be announced.
-During the graded lab, a Kibana dashboard has to be created which contains at least 8 visualizations that display different data. Note that the created dashboard must feature at least 4 different types (for example, pie chart, bar chart, table, etc.). The Kibana dashboard '''must''' be created for syslog events received with Logstash. Dashboards created for events from Filebeat are '''not accepted'''.
-=== Instructions for setting up the course virtual machine for the graded lab ===
-Since the course virtual machine needs more resources for the graded lab than pre-configured defaults, increase the amount of RAM to at least 4GB and the number of CPUs to at least 2.
-Start Elasticsearch:
- systemctl start elasticsearch
-Start Kibana:
- systemctl start kibana
-Start Logstash:
- systemctl start logstash
-Make sure you can access Kibana web interface via following URL: https://ipaddress_of_your_vm:5601 (login: elastic, password: default-root-password-of-the-VM). Note that the startup process of Kibana might take several minutes before the web interface will become available.
-In order to receive syslog events from local rsyslog, configure it to send all events to Logstash. For example, set up the file /etc/rsyslog.d/logstash.conf with the following content:
- *.*   @127.0.0.1:10514
-After creating that file, don't forget to restart rsyslog:
- systemctl restart rsyslog
-In Kibana, select "Stack Management" from the pull-down menu on the top left corner in the Kibana interface. Note that "Stack Management" is the last selection in the pull-down menu!
-Then go to Kibana->Data Views, and select Create Data View:
-* for "Name", select logstash*
-* for "Index pattern", select logstash*
-* for "Timestamp field", select @timestamp
-* after setting the above fields, select "Save data view to Kibana"
-Generate some syslog events by accessing the web server of the virtual machine and logging in into the virtual machine over SSH. For seeing the events, select "Discover" in the Kibana pull-down menu. The web server and SSH events can be searched with the following queries:
-* program:apache
-* program:sshd
-After verifying that the web server and SSH events have been received by Kibana, you can create dashboards for these events under the "Dashboard" selection of the Kibana pull-down menu.

Erinevus lehekülje "Itx8071-graded-lab" redaktsioonide vahel

Viimane redaktsioon: 13. august 2024, kell 12:34

Navigeerimismenüü

Otsing