Difference between revisions of "Cool Solution - Kibana"
From Univention Wiki
| Line 1: | Line 1: | ||
| − | {{Version|UCS=4. | + | {{Version|UCS=4.2}} |
| + | {{Version|UCS=4.3}} | ||
{{Cool Solutions Disclaimer}} | {{Cool Solutions Disclaimer}} | ||
{{#seo: | {{#seo: | ||
| Line 5: | Line 6: | ||
<!--|description=--> | <!--|description=--> | ||
}} | }} | ||
| − | |||
Kibana is a data virtualization tool which allows you to view the content of your [[ElasticSearch]] database. It is especially useful for viewing aggregated log files and metrics of your domain. | Kibana is a data virtualization tool which allows you to view the content of your [[ElasticSearch]] database. It is especially useful for viewing aggregated log files and metrics of your domain. | ||
== Installation == | == Installation == | ||
| − | |||
=== Install Elasticsearch === | === Install Elasticsearch === | ||
| − | |||
Kibana uses Elasticsearch as a Backend. Please install [[ElasticSearch]] according to our Article. We assume that you have the repository set from that article. | Kibana uses Elasticsearch as a Backend. Please install [[ElasticSearch]] according to our Article. We assume that you have the repository set from that article. | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
=== Install Kibana === | === Install Kibana === | ||
| − | + | Kibana utilizes the same repositories as [[ElasticSearch]]. Thus it can be installed directly. Furthermore enable Kibana as an autostarting service | |
| − | Kibana utilizes the same repositories as [[ElasticSearch]]. Thus it can be installed directly. | ||
<pre> | <pre> | ||
| − | + | univention-install kibana | |
| − | + | systemctl enable kibana.service | |
| − | + | systemctl start kibana.service | |
| − | |||
| − | |||
| − | |||
| − | service | ||
</pre> | </pre> | ||
=== Open the Firewall Ports === | === Open the Firewall Ports === | ||
| − | |||
To Access Kibana, you need to open the port in the firewall. Set the respective UCR variables to open them | To Access Kibana, you need to open the port in the firewall. Set the respective UCR variables to open them | ||
| − | |||
<pre> | <pre> | ||
| − | ucr set security/packetfilter/tcp/5601/all=ACCEPT | + | ucr set security/packetfilter/tcp/5601/all=ACCEPT \ |
| + | ucr set security/packetfilter/tcp/5601/en="Kibana" | ||
service univention-firewall restart | service univention-firewall restart | ||
</pre> | </pre> | ||
| Line 46: | Line 31: | ||
=== Configure Kibana === | === Configure Kibana === | ||
| − | + | Most default values for Kibana are sufficient. However, to access it from remote, the server name has to be set. Open the config file '''/etc/kibana/kibana.yml''' and find the line starting with | |
| − | Most default values for Kibana are sufficient. However, to access it from remote, the server name has to be set. Open the config file | ||
<pre> | <pre> | ||
| − | + | server.host | |
</pre> | </pre> | ||
| − | + | Uncomment the line and insert the correct fully qualified server name. | |
| − | |||
=== Restart === | === Restart === | ||
| − | |||
Restart Elasticsearch and Kibana | Restart Elasticsearch and Kibana | ||
<pre> | <pre> | ||
| − | service | + | systemctl restart elasticsearch.service |
| − | service | + | systemctl restart kibana.service |
</pre> | </pre> | ||
== First Use == | == First Use == | ||
| − | + | You can access Kibana using the name of your server and port 5601: | |
| − | You can access Kibana using the name of your server and port 5601 | + | <pre> |
| − | + | http://<ip of your server>:5601 | |
| + | </pre> | ||
Afterward please set the Discovery patterns according to the beats used within the web interface and configure the matching visualization. | Afterward please set the Discovery patterns according to the beats used within the web interface and configure the matching visualization. | ||
| − | |||
| − | |||
Latest revision as of 14:03, 6 April 2018
Note: Cool Solutions are articles documenting additional functionality based on Univention products.
Not all of the shown steps in the article are covered by Univention Support. For questions about your support coverage contact your contact person at Univention before you want to implement one of the shown steps.
Kibana is a data virtualization tool which allows you to view the content of your ElasticSearch database. It is especially useful for viewing aggregated log files and metrics of your domain.
Contents
Installation
Install Elasticsearch
Kibana uses Elasticsearch as a Backend. Please install ElasticSearch according to our Article. We assume that you have the repository set from that article.
Install Kibana
Kibana utilizes the same repositories as ElasticSearch. Thus it can be installed directly. Furthermore enable Kibana as an autostarting service
univention-install kibana systemctl enable kibana.service systemctl start kibana.service
Open the Firewall Ports
To Access Kibana, you need to open the port in the firewall. Set the respective UCR variables to open them
ucr set security/packetfilter/tcp/5601/all=ACCEPT \ ucr set security/packetfilter/tcp/5601/en="Kibana" service univention-firewall restart
Configure Kibana
Most default values for Kibana are sufficient. However, to access it from remote, the server name has to be set. Open the config file /etc/kibana/kibana.yml and find the line starting with
server.host
Uncomment the line and insert the correct fully qualified server name.
Restart
Restart Elasticsearch and Kibana
systemctl restart elasticsearch.service systemctl restart kibana.service
First Use
You can access Kibana using the name of your server and port 5601:
http://<ip of your server>:5601
Afterward please set the Discovery patterns according to the beats used within the web interface and configure the matching visualization.
