Difference between revisions of "Cool Solution - Kibana"

From Univention Wiki

Jump to: navigation, search
(Created page with "Kibana is a data virtualization tool which allows you to view the content of your Elasticsearch database. It is especially useful for viewing aggregated log files and metr...")
 
 
(6 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Kibana is a data virtualization tool which allows you to view the content of your [[Elasticsearch]] database. It is especially useful for viewing aggregated log files and metrics of your domain.
+
{{Version|UCS=4.2}}
 +
{{Version|UCS=4.3}}
 +
{{Cool Solutions Disclaimer}}
 +
{{#seo:
 +
|title={{#replace:{{#replace:{{#replace:{{#replace:{{FULLPAGENAME}}|'|'}}|&|&}}|"|"}}|Cool Solution - |}} - {{SITENAME}}
 +
<!--|description=-->
 +
}}
 +
 
 +
Kibana is a data virtualization tool which allows you to view the content of your [[ElasticSearch]] database. It is especially useful for viewing aggregated log files and metrics of your domain.
  
 
== Installation ==
 
== Installation ==
 
 
=== Install Elasticsearch ===
 
=== Install Elasticsearch ===
 
+
Kibana uses Elasticsearch as a Backend. Please install [[ElasticSearch]] according to our Article. We assume that you have the repository set from that article.
Kibana uses Elasticsearch as a Backend. Please install Elasticsearch according to our Article. We assume that you have the repository set from that article.
 
 
 
=== Install sudo ===
 
 
 
Install sudo from the Univention Repository
 
<pre>
 
univention-install sudo
 
</pre>
 
  
 
=== Install Kibana ===
 
=== Install Kibana ===
 
+
Kibana utilizes the same repositories as [[ElasticSearch]]. Thus it can be installed directly. Furthermore enable Kibana as an autostarting service
Kibana utilizes the same repositories as Elasticsearch. Thus it can be installed directly.
 
<pre>
 
apt-get update && apt-get install kibana
 
</pre>
 
 
 
Autostart Kibana automatically
 
 
<pre>
 
<pre>
update-rc.d kibana defaults 95 10
+
univention-install kibana
service kibana start
+
systemctl enable kibana.service
 +
systemctl start kibana.service
 
</pre>
 
</pre>
  
 
=== Open the Firewall Ports ===
 
=== Open the Firewall Ports ===
 
 
To Access Kibana, you need to open the port in the firewall. Set the respective UCR variables to open them
 
To Access Kibana, you need to open the port in the firewall. Set the respective UCR variables to open them
 
 
<pre>
 
<pre>
ucr set security/packetfilter/tcp/5601/all=ACCEPT
+
ucr set security/packetfilter/tcp/5601/all=ACCEPT \
 +
ucr set security/packetfilter/tcp/5601/en="Kibana"
 
service univention-firewall restart
 
service univention-firewall restart
 
</pre>
 
</pre>
Line 38: Line 31:
  
 
=== Configure Kibana ===
 
=== Configure Kibana ===
 
+
Most default values for Kibana are sufficient. However, to access it from remote, the server name has to be set. Open the config file '''/etc/kibana/kibana.yml''' and find the line starting with
Most default values for Kibana are sufficient. However, to access it from remote, the server name has to be set. Open the config file  
 
 
<pre>
 
<pre>
nano /etc/kibana/kibana.yml
+
server.host
 
</pre>
 
</pre>
 
+
Uncomment the line and insert the correct fully qualified server name.
Find the line starting with <pre>server.host</pre> remove the <pre>#</pre> from the beginning of the line and replace the value with the actual server name. Close the Editor with CTRL+w CTRL+x.
 
  
 
=== Restart ===
 
=== Restart ===
 
 
Restart Elasticsearch and Kibana
 
Restart Elasticsearch and Kibana
 
<pre>
 
<pre>
service elasticsearch restart
+
systemctl restart elasticsearch.service
service kibana restart
+
systemctl restart kibana.service
 
</pre>
 
</pre>
  
 
== First Use ==
 
== First Use ==
 +
You can access Kibana using the name of your server and port 5601:
 +
<pre>
 +
http://<ip of your server>:5601
 +
</pre>
  
You can access Kibana using the name of your server and port 5601
+
Afterward please set the Discovery patterns according to the beats used within the web interface and configure the matching visualization.
For the first login, use the username elastic and the password changeme .
 

Latest revision as of 14:03, 6 April 2018

Produktlogo UCS Version 4.2
Produktlogo UCS Version 4.3

Note: Cool Solutions are articles documenting additional functionality based on Univention products. Not all of the shown steps in the article are covered by Univention Support. For questions about your support coverage contact your contact person at Univention before you want to implement one of the shown steps.

Also regard the legal notes at Terms of Service.

Kibana is a data virtualization tool which allows you to view the content of your ElasticSearch database. It is especially useful for viewing aggregated log files and metrics of your domain.

Installation

Install Elasticsearch

Kibana uses Elasticsearch as a Backend. Please install ElasticSearch according to our Article. We assume that you have the repository set from that article.

Install Kibana

Kibana utilizes the same repositories as ElasticSearch. Thus it can be installed directly. Furthermore enable Kibana as an autostarting service

univention-install kibana
systemctl enable kibana.service
systemctl start kibana.service

Open the Firewall Ports

To Access Kibana, you need to open the port in the firewall. Set the respective UCR variables to open them

ucr set security/packetfilter/tcp/5601/all=ACCEPT \
ucr set security/packetfilter/tcp/5601/en="Kibana"
service univention-firewall restart


Configure Kibana

Most default values for Kibana are sufficient. However, to access it from remote, the server name has to be set. Open the config file /etc/kibana/kibana.yml and find the line starting with

server.host

Uncomment the line and insert the correct fully qualified server name.

Restart

Restart Elasticsearch and Kibana

systemctl restart elasticsearch.service
systemctl restart kibana.service

First Use

You can access Kibana using the name of your server and port 5601:

http://<ip of your server>:5601

Afterward please set the Discovery patterns according to the beats used within the web interface and configure the matching visualization.

Personal tools