Linux Administration Cookbook

How it works...

What we're effectively doing is setting up three things:

• Elasticsearch: To act as the storage point for all the data we want to pipe into our box
• Kibana: To act as the frontend and dashboard to our data, meaning we can query and peruse it at our leisure
• Logstash: To create a listener that acts just like the syslog receiver we set up earlier on in this chapter

When all three of these components are enabled, they create a way to centralize any logs (or other data) that we might wish to throw at our solution.

It's basically a pretty way of making a syslog receiver, which also happens to be capable of a lot more besides.

One thing we didn't do here was forward our logs from centos1 to its own Logstash listener; this can be done, ...