{"id":3442,"date":"2019-06-29T14:36:41","date_gmt":"2019-06-29T11:36:41","guid":{"rendered":"https:\/\/kifarunix.com\/?p=3442"},"modified":"2019-07-10T12:42:29","modified_gmt":"2019-07-10T09:42:29","slug":"install-elastic-stack-7-on-fedora-30-fedora-29-centos-7","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/install-elastic-stack-7-on-fedora-30-fedora-29-centos-7\/","title":{"rendered":"Install Elastic Stack 7 on Fedora 30\/Fedora 29\/CentOS 7"},"content":{"rendered":"\n<p>In this guide, we are going to learn how to install Elastic Stack 7 on Fedora 30\/Fedora 29\/CentOS 7. Elastic Stack comprises of:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Elasticsearch<\/strong> is a search and analytics engine<\/li><li><strong>Kibana<\/strong> is a data visualization and dash-boarding tool that enables you to analyze data stored on Elasticsearch.<\/li><li><strong>Logstash<\/strong> is a server\u2011side data processing pipeline that ingests data from multiple sources simultaneously, transforms it, and then stashes it on search analytics engine like Elasticsearch<\/li><li><strong>Beats<\/strong> on the other hand are the log shippers that collects logs from different endpoints and sends them to either Logstash or directly to Elasticsearch.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Install Elastic Stack 7 on Fedora 30\/Fedora 29\/CentOS 7<\/h2>\n\n\n\n<p>Elastic Stack components should be installed in the following order.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Install Elasticsearch<\/li><li>Install Kibana<\/li><li>Install Logstash<\/li><li>Install Beats<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Install-elasticsearch\">Installing Elasticsearch 7 on Fedora 30\/Fedora 29\/CentOS 7<\/h3>\n\n\n\n<p>Installation of Elasticsearch 7.0 on Fedora 30\/Fedora 29\/CentOS 7 has been covered in our previous guides. See the links below;<\/p>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-elasticsearch-7-on-fedora-30\/\" target=\"_blank\">Install Elasticsearch 7 on Fedora 30<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-elasticsearch-7-x-on-centos-7-fedora-29\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Install Elasticsearch 7.x on CentOS 7\/Fedora 29<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Configure Elasticsearch Bind Interface<\/h3>\n\n\n\n<p>If you need to connect to Elasticsearch externally, you need to bind it to non-loopback interface. Hence, edit the configuration file and set the value of <strong>network.host<\/strong> to a non-loopback interface or interface itself. See &nbsp;<a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.elastic.co\/guide\/en\/elasticsearch\/reference\/current\/modules-network.html#network-interface-values\" target=\"_blank\">Special values for&nbsp;<\/a><code><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.elastic.co\/guide\/en\/elasticsearch\/reference\/current\/modules-network.html#network-interface-values\" target=\"_blank\">network.host<\/a><\/code>.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>vim \/etc\/elasticsearch\/elasticsearch.yml<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>...\n# ---------------------------------- Network -----------------------------------\n#\n# Set the bind address to a specific IP (IPv4 or IPv6):\n#\n#network.host: 192.168.0.1\nnetwork.host: 192.168.43.75\n...<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Configure Elasticsearch Single Node Discovery<\/h3>\n\n\n\n<p>If you are running Elasticsearch in non-production environment (non-cluster environment) and want to bind transport to an non-loopback interface, just like in this demo, you need to set the discovery mode to <strong>single node<\/strong>. Otherwise you may get bootstrap check failed errors.<\/p>\n\n\n\n<p>Therefore add the line, <strong>discovery.type: single-node<\/strong>, under the Discovery section of the Elasticsearch configuration file to enable <strong>single node discovery<\/strong>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>...\n# --------------------------------- Discovery ----------------------------------\n#\n# Pass an initial list of hosts to perform discovery when this node is started:\n# The default list of hosts is [\"127.0.0.1\", \"[::1]\"]\n#\n#discovery.seed_hosts: [\"host1\", \"host2\"]\n#\n# Bootstrap the cluster using an initial set of master-eligible nodes:\n#\n#cluster.initial_master_nodes: [\"node-1\", \"node-2\"]\n#\ndiscovery.type: single-node\n# For more information, consult the discovery and cluster formation module documentation.\n#\n# ---------------------------------- Gateway -----------------------------------<\/code><\/pre>\n\n\n\n<p>Save the configuration file and restart Elasticsearch.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl restart elasticsearch.service<\/code><\/pre>\n\n\n\n<p>Verify if Elasticsearch is listening on non-loop interface as defined above.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ss -alnpt | grep 9200       \nLISTEN  0        128        [::ffff:192.168.43.103]:9200                *:*      users:((\"java\",pid=30625,fd=213))<\/code><\/pre>\n\n\n\n<p>You can also check it as follows.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -XGET http:\/\/192.168.43.103:9200\n{\n  \"name\" : \"elkstack.example.com\",\n  \"cluster_name\" : \"elasticsearch\",\n  \"cluster_uuid\" : \"f_Au_kWoQ4CjVvghdtIW2w\",\n  \"version\" : {\n    \"number\" : \"7.2.0\",\n    \"build_flavor\" : \"default\",\n    \"build_type\" : \"rpm\",\n    \"build_hash\" : \"508c38a\",\n    \"build_date\" : \"2019-06-20T15:54:18.811730Z\",\n    \"build_snapshot\" : false,\n    \"lucene_version\" : \"8.0.0\",\n    \"minimum_wire_compatibility_version\" : \"6.8.0\",\n    \"minimum_index_compatibility_version\" : \"6.0.0-beta1\"\n  },\n  \"tagline\" : \"You Know, for Search\"\n}<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"install-kibana\">Install Kibana 7 on Fedora 30\/Fedora 29\/CentOS 7<\/h3>\n\n\n\n<p>To install Kibana 7, you need to create Elastic repos. However, if you followed the above guides, we already created the Elastic Stack RPM repos. Hence, you can simply run the command below to install Kibana 7.<\/p>\n\n\n\n<p>You can however create Elastic 7.x repos by executing the command below;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Import Elastic Repo GPG signing key<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>rpm --import https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Create Elastic 7.x Repo<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>cat > \/etc\/yum.repos.d\/elastic-7.x.repo &lt;&lt; EOF\n[elasticsearch-7.x]\nname=Elasticsearch repository for 7.x packages\nbaseurl=https:\/\/artifacts.elastic.co\/packages\/7.x\/yum\ngpgcheck=1\ngpgkey=https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch\nenabled=1\nautorefresh=1\ntype=rpm-md\nEOF<\/code><\/pre>\n\n\n\n<p>Note, since YUM package manager works on both Fedora and CentOS, we will be using YUM for package installation. You can however use DNF on Fedora system.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>yum install kibana<\/code><\/pre>\n\n\n\n<p>Once the installation is done, start and enable Kibana to run on system boot.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl start kibana\nsystemctl enable kibana<\/code><\/pre>\n\n\n\n<p>Kibana is set to run on <strong>localhost:5601<\/strong> by default. As a layer of security, we are going to Nginx and configure it to proxy the connection to Kibana via a publicly accessible interface IP.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Install Nginx<\/h4>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>yum install nginx<\/code><\/pre>\n\n\n\n<p>Note that you need to install <strong>EPEL<\/strong> repos on CentOS 7 in order to install Nginx.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>yum install epel-release<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Configure Nginx with SSL to Proxy Kibana<\/h4>\n\n\n\n<p>Generate the SSL\/TLS certificates for Nginx SSL proxy connection and create Nginx configuration file to define Kibana settings. In this guide, we are using self-signed certificate. You can as well obtain a trusted CA certificate from your preferred provider. <\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Generate Self-signed SSL\/TLS certificates<\/h4>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>mkdir \/etc\/ssl\/private<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/kibana-selfsigned.key -out \/etc\/ssl\/certs\/kibana-selfsigned.crt<\/code><\/pre>\n\n\n\n<p>Create Kibana Nginx configuration. You can use the recommendations from the <a rel=\"noreferrer noopener\" href=\"https:\/\/cipherli.st\/\" target=\"_blank\">Cipherli.st<\/a> while configuring SSL.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>vim \/etc\/nginx\/conf.d\/kibana.conf<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>server {\n\tlisten 80;\n\tserver_name elastic.example.com;\n\treturn 301 https:\/\/$host$request_uri;\n}\nserver {\n\tlisten 443 ssl;\n\tserver_name elastic.example.com;\n\n\troot \/usr\/share\/nginx\/html;\n\tindex index.html index.htm index.nginx-debian.html;\n\n    \tssl_certificate \/etc\/ssl\/certs\/kibana-selfsigned.crt;\n\tssl_certificate_key \/etc\/ssl\/private\/kibana-selfsigned.key;\n\n\tssl_protocols TLSv1.2 TLSv1.3;\n\tssl_prefer_server_ciphers on; \n\tssl_dhparam \/etc\/ssl\/certs\/dhparam.pem;\n\tssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;\n\tssl_ecdh_curve secp384r1;\n\tssl_session_timeout  10m;\n\tssl_session_cache shared:SSL:10m;\n\tresolver 192.168.43.1 8.8.8.8 valid=300s;\n\tresolver_timeout 5s; \n\tadd_header Strict-Transport-Security \"max-age=63072000; includeSubDomains; preload\";\n\tadd_header X-Frame-Options DENY;\n\tadd_header X-Content-Type-Options nosniff;\n\tadd_header X-XSS-Protection \"1; mode=block\";\n\n\taccess_log  \/var\/log\/nginx\/kibana_access.log;\n\terror_log  \/var\/log\/nginx\/kibana_error.log;\n\n\tauth_basic \"Authentication Required\";\n\tauth_basic_user_file \/etc\/nginx\/.kibana-auth;\n\n\tlocation \/ {\n\t        proxy_pass http:\/\/127.0.0.1:5601;\n        \tproxy_http_version 1.1;\n\t        proxy_set_header Upgrade $http_upgrade;\n        \tproxy_set_header Connection 'upgrade';\n\t        proxy_set_header Host $host;\n        \tproxy_cache_bypass $http_upgrade;\n\t}\n}<\/code><\/pre>\n\n\n\n<p>Generate Deffie-Hellman group on the location specified by the <strong>ssl_dhparam<\/strong> parameter.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>openssl dhparam -out \/etc\/ssl\/certs\/dhparam.pem 2048<\/code><\/pre>\n\n\n\n<p>Set the value of  <a rel=\"noreferrer noopener\" aria-label=\"types_hash_max_size (opens in a new tab)\" href=\"http:\/\/nginx.org\/en\/docs\/http\/ngx_http_core_module.html#types_hash_max_size\" target=\"_blank\">types_hash_max_size<\/a> to 4096.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>sed -i 's\/types_hash_max_size 2048\/types_hash_max_size 4096\/' \/etc\/nginx\/nginx.conf<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Configure Nginx Authentication<\/h4>\n\n\n\n<p>To configure Nginx User authentication, you need to create users and their password. These authentication details will be saved in the file,  <strong>\/etc\/nginx\/.kibana-auth<\/strong>, specified by <strong>auth_basic_user_file<\/strong> parameter in the Nginx configuration file.<\/p>\n\n\n\n<p>You can use <strong>openssl<\/strong> command to generate the authentication credentials as shown below. Replace the USERNAME and PASSWORD accordingly;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>printf \"USERNAME:$(openssl passwd -crypt PASSWORD)\\n\" &gt; \/etc\/nginx\/.kibana-auth<\/code><\/pre>\n\n\n\n<p>Verify the Nginx syntax and reload it if everything is okay.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>nginx -t\nnginx: the configuration file \/etc\/nginx\/nginx.conf syntax is ok\nnginx: configuration file \/etc\/nginx\/nginx.conf test is successful<\/code><\/pre>\n\n\n\n<p>Start and enable Nginx to run on system boot.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl start nginx\nsystemctl enable nginx<\/code><\/pre>\n\n\n\n<p style=\"text-align:left\">If Firewalld is running, allow Nginx connections, both HTTP and HTTPS.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>firewall-cmd --add-service={http,https} --permanent\nfirewall-cmd --reload<\/code><\/pre>\n\n\n\n<p>If SELinux is running, configure it to allow Nginx to connect to network.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>setsebool -P httpd_can_network_connect 1<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Configure Kibana<\/h3>\n\n\n\n<p>Since we set the proxy to loopback IP address instead of <strong>localhost<\/strong>, you need to configure Kibana to use loopback IP address.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>vim \/etc\/kibana\/kibana.yml<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>server.host: \"127.0.0.1\"<\/code><\/pre>\n\n\n\n<p>Also, If Elasticsearch is configured to listen on a different IP address, you need to configure Elasticsearch URL in Kibana.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>elasticsearch.hosts: [\"http:\/\/192.168.43.75:9200\"]<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Access Kibana Dashboard<\/h3>\n\n\n\n<p>You should now be able to access Kibana dashboard via the server fully qualified hostname, <strong>https:\/\/elastic.example.com<\/strong> in this case. Accept the risk of using the self-signed certificate and proceed. Before you can access the Kibana dashboard, you will be required to provide the authentication credentials set above.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/Kibana-Nginx-Authentication.png\"><img loading=\"lazy\" decoding=\"async\" width=\"712\" height=\"224\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/Kibana-Nginx-Authentication.png\" alt=\"Install Elastic Stack 7 on Fedora 30\/Fedora 29\/CentOS 7\" class=\"wp-image-3502\" title=\"\"><\/a><\/figure>\n\n\n\n<p>After authentication, you will land on Kibana dashboard. Since we don&#8217;t have data yet, you will see the screen below. Click <strong>Explore My Own<\/strong> to proceed to Kibana dashboard.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/kibana-data.png\"><img loading=\"lazy\" decoding=\"async\" width=\"509\" height=\"492\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/kibana-data.png\" alt=\"Kibana data dashboards\" class=\"wp-image-3504\" title=\"\"><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/04\/kibana-default-dashboard.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1353\" height=\"648\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/kibana-default-dashboard.png\" alt=\"kibana dashboard\" class=\"wp-image-3505\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/kibana-default-dashboard.png 1353w, https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/06\/kibana-default-dashboard-768x368.png 768w\" sizes=\"(max-width: 1353px) 100vw, 1353px\" \/><\/a><\/figure>\n\n\n\n<p>Kibana is now installed on Fedora 30\/Fedora 29\/CentOS 7. The next step is to install Logstash, the data processing engine and Filebeat data shippers. See how to install Logstash and Filebeat by following the links below;<\/p>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-logstash-7-on-fedora-30-fedora-29-centos-7\/\" target=\"_blank\">Install Logstash 7 on Fedora 30\/Fedora 29\/CentOS 7<\/a><\/p>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-filebeat-on-fedora-30-fedora-29-centos-7\/\" target=\"_blank\">Install Filebeat on Fedora 30\/Fedora 29\/CentOS 7<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Create Kibana Index Pattern<\/h3>\n\n\n\n<p>Now that your Filebeat is sending events to your Elastic stack, you need to add your Elasticsearch index to Kibana. Hence, Click the&nbsp;<strong>settings gear icon<\/strong>&nbsp;on the left panel of Kibana and navigate to&nbsp;<strong>Index Patters<\/strong>&nbsp;under Kibana &gt;&nbsp;<strong>Create Index Patterns<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-add-index.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1343\" height=\"648\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-add-index.png\" alt=\"Install Elastic Stack 7 on Fedora 30\/Fedora 29\/CentOS 7\" class=\"wp-image-3480\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-add-index.png 1343w, https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-add-index-768x371.png 768w\" sizes=\"(max-width: 1343px) 100vw, 1343px\" \/><\/a><\/figure>\n\n\n\n<p>Proceed to the Next step and set the time field name to <strong>timestamp<\/strong>. Once that is done, click <strong>Create Index Pattern<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/05\/kibana-index-timestamp.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1331\" height=\"617\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/05\/kibana-index-timestamp.png\" alt=\"create kibana index pattern\" class=\"wp-image-2804\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/05\/kibana-index-timestamp.png 1331w, https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/05\/kibana-index-timestamp-768x356.png 768w\" sizes=\"(max-width: 1331px) 100vw, 1331px\" \/><\/a><\/figure>\n\n\n\n<p>Next, click on Discover tab on the left panel of Kibana to see your parsed event data.<\/p>\n\n\n\n<p>SSH successful Logins<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-successful-ssh-logins-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1347\" height=\"637\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-successful-ssh-logins-1.png\" alt=\"Kibana SSH authentication events\" class=\"wp-image-3509\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-successful-ssh-logins-1.png 1347w, https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-successful-ssh-logins-1-768x363.png 768w\" sizes=\"(max-width: 1347px) 100vw, 1347px\" \/><\/a><\/figure>\n\n\n\n<p>SSH failed logins<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-failed-ssh-logins-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1344\" height=\"640\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-failed-ssh-logins-1.png\" alt=\"Kibana SSH authentication events\" class=\"wp-image-3510\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-failed-ssh-logins-1.png 1344w, https:\/\/kifarunix.com\/wp-content\/uploads\/2019\/07\/kibana-failed-ssh-logins-1-768x366.png 768w\" sizes=\"(max-width: 1344px) 100vw, 1344px\" \/><\/a><\/figure>\n\n\n\n<p>Well, as you can see, we have the fields that were extracted using our grok filter defined in our <a rel=\"noreferrer noopener\" aria-label=\"Logstash configuration on Fedora 30\/Fedora 29\/CentOS 7 (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-logstash-7-on-fedora-30-fedora-29-centos-7\/\" target=\"_blank\">Logstash configuration on Fedora 30\/Fedora 29\/CentOS 7<\/a>.<\/p>\n\n\n\n<p>You can now proceed to collect events from other sources and push them to your Elastic Stack. Enjoy.<\/p>\n\n\n\n<p>Reference;<\/p>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\"Kibana User Guide (opens in a new tab)\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/setup.html\" target=\"_blank\">Kibana User Guide<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Related Tutorials:<\/h3>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-and-configure-logstash-7-on-ubuntu-18-debian-9-8\/\" target=\"_blank\">Install and Configure Logstash 7 on Ubuntu 18\/Debian 9.8<\/a><\/p>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-and-configure-filebeat-7-on-ubuntu-18-04-debian-9-8\/\" target=\"_blank\">Install and Configure Filebeat 7 on Ubuntu 18.04\/Debian 9.8<\/a><\/p>\n\n\n\n<p><a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/install-elastic-stack-7-on-ubuntu-18-04-debian-9-8\/\" target=\"_blank\">Install Elastic Stack 7 on Ubuntu 18.04\/Debian 9.8<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-elasticsearch-7-x-on-ubuntu-18-04-debian-9-8\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Install Elasticsearch 7.x on Ubuntu 18.04\/Debian 9.8<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this guide, we are going to learn how to install Elastic Stack 7 on Fedora 30\/Fedora 29\/CentOS 7. Elastic Stack comprises of: Elasticsearch is<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[910,72],"tags":[88,912,913,289,924,920],"class_list":["post-3442","post","type-post","status-publish","format-standard","hentry","category-elastic-stack","category-monitoring","tag-centos-7","tag-elastic-stack","tag-elk","tag-fedora-29","tag-fedora-30","tag-kibana","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50"],"_links":{"self":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/3442"}],"collection":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/comments?post=3442"}],"version-history":[{"count":12,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/3442\/revisions"}],"predecessor-version":[{"id":3594,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/3442\/revisions\/3594"}],"wp:attachment":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media?parent=3442"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/categories?post=3442"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/tags?post=3442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}