Security Automation with Ansible 2

Setting up the Elastic Stack

The stack is a combination of:

• The Elasticsearch service
• The Logstash service
• The Kibana service
• The Beats service on all the devices 

This Elastic Stack can be set up in different ways. In this chapter, we are going to set up Elasticsearch, Logstash, and Kibana on a single machine.

This is the main log collection machine:

• It requires a minimum of 4 GB RAM, as we are using a single machine to serve three services (Elasticsearch, Logstash, and Kibana)
• It requires a minimum of 20 GB disk space, and, based on your log size, you can add the disk space