Install Elasticsearch

1
sudo pacman -S elasticsearch
1
systemctl start elasticsearch.service
1
curl http://127.0.0.1:9200

Install Kibana

1
sudo pacman -S kibana
1
sudo vim /etc/kibana/kibana.yml
1
2
3
server.port: 5601
server.host: "localhost"
elasticsearch.hosts: ["http://localhost:9200"]
1
systemctl start kibana.service

To launch the Kibana web interface, point your browser to port 5601. For example, http://127.0.0.1:5601.

Install Beats

Install Filebeat

Install Metricbeat

1
sudo pacman -S metricbeat
1
sudo vim /etc/metricbeat/metricbeat.yml
1
setup.dashboards.enabled: true

From the Metricbeat install directory, enable the system module

1
cd /etc/metricbeat
1
sudo metricbeat modules enable system
1
systemctl start metricbeat.service

Visualize system metrics in Kibana

To visualize system metrics, open your browser and navigate to the Metricbeat system overview dashboard: http://localhost:5601/app/kibana#/dashboard/Metricbeat-system-overview-ecs

Install Logstash (optional)

If your data requires additional processing that is not available in Beats, then you need to add Logstash to your deployment.

Configure Logstash to listen for Beats input

https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-elastic-stack.html#install-logstash

https://medium.com/@maxime.durand.54/monitoring-your-server-with-elastic-stack-7c03601de372