Collect all log files of the Elastic Stack

[xeraa]

Filebeat modules:

• Logstash
• Elasticsearch, probably added in 6.4
• Kibana, probably added in 6.4
• Beats

[dadoonet]

Note that current master branch supports /var/log/logstash/logstash-plain.log.

[xeraa]

Thanks! I've updated this to the right checkbox list and added references to the upcoming implementation for Kibana and Elasticsearch

[tacowart]

I have a question as I'm a newbie with elk stack, but didn't want to create an entire new issue. How can I just log in to kibana after running this? I saw in the code the password set for the reference accounts look like a variable {{kibana_user_password}}. But I can't log in at all. Any ideas? Could I just remove x-pack? I honestly don't need security on my project as I'm just leveraging this to ingest some old log files for analysis. SOS

[xeraa]

The right combination should be the user elastic with password (from https://github.com/xeraa/vagrant-elastic-stack/blob/master/elastic-stack/vars.yml#L4).

Alternatively you could disable security, but with the amount of unsecured public instances I'd be double careful with that.