tpotce/docker/elk
t3chn0m4g3 984ba958fb logstash template not upgraded
with daily index enabled logstash will not be able to put new events into ES
simple solution, just deleting logstash template upon logstash start and leave it to logstash to upload the latest template
.
2020-02-01 14:08:23 +00:00
..
doc Start cleaning up and update documentation 2017-10-23 13:02:04 +02:00
elasticsearch remove ilm support, breaks existing index at upgrade 2020-01-31 15:50:34 +00:00
head elk 7.x dev test 2020-01-31 14:21:55 +00:00
kibana elk 7.x dev test 2020-01-31 14:21:55 +00:00
logstash logstash template not upgraded 2020-02-01 14:08:23 +00:00
docker-compose.yml elk 7.x dev test 2020-01-31 14:21:55 +00:00
LICENSE include docker repos 2017-10-13 18:58:14 +00:00
README.md cleanup 2019-03-01 21:08:36 +00:00

Elasticsearch

Logstash

Kibana

elk stack

elk is a stack combining elasticsearch, logstash and the kibana dashboard. It is used to structure and visualize data in realtime.

This dockerized version is part of the T-Pot community honeypot of Deutsche Telekom AG.

The Dockerfiles contain the blueprint for the dockerized elk stack and will be used to setup the docker images.

T-Pot Dashboard

T-Pot Dashboard