How to Install Elasticsearch, Logstash, Kibana and Filebeat (ELK Stack) on Ubuntu

Install Elasticsearch, Logstash, Kibana and Filebeat

sudo apt update

sudo apt install elasticsearch

sudo systemctl start elasticsearch

sudo systemctl enable elasticsearch

curl -X GET "localhost:9200"

sudo apt install kibana

Sudo systemctl enable kibana

systemctl start kibana

Sudo apt install logstash

input {
beats {
port = 5044
}
}

output {
elasticsearch {
hosts = ["localhost:9200"]
manage_template = false
}
} else {
elasticsearch {
hosts = ["localhost:9200"]
manage_template = false
}
}
}

sudo systemctl start logstash

sudo systemctl enable logstash

sudo apt install filebeat

sudo filebeat modules enable system
sudo filebeat modules list

sudo filebeat setup --pipelines --modules system

Sudo filebeat modules enable system
sudo systemctl enable filebeat

[serensiotic]

i have been stuck on this issue since 5days now " ./logstash --path.settings /etc/logstash -t " command it says " The given configuration is invalid. Reason: Expected one of [ \t\r\n], "#", "=>" at line 3, column 10 (byte 27) after input {
file {
path
" although i have checked it so many times it does not work please help me out
input {
beats {
port = 5044
}
}

[yeu-bongda]

why have'nt account manager administrator ?

[ederferreira]

Forgot to add ">" after "="
😉

[yourdima]

The most useless video about ELK. Does author understand ELK installation? "Thanks" for waste my 20 minutes.

[ederferreira]

I noticed a bug when running the command:
filebeat setup --pipelines --modules system

Solved here: filebeat setup --pipelines --modules system -M "system.syslog.enabled=true" -M "system.auth.enabled=true"