Comments on: ELK in one (Vagrant) box http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/ A blog about Search as THE solution Mon, 26 Oct 2015 18:07:52 +0000 hourly 1 https://wordpress.org/?v=3.9.40 By: Corpus http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19117 Wed, 15 Apr 2015 08:02:51 +0000 http://blog.comperiosearch.com/?p=2813#comment-19117 hi what are the credentials.

Additionally, i can ping from ELK guest to mac os host. but vice versa is not working. network adapter is nat.

]]> By: Christoffer Vig http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19088 Mon, 16 Feb 2015 18:06:26 +0000 http://blog.comperiosearch.com/?p=2813#comment-19088 The project has now been updated to work with Elasticsearch 1.4, Logstash 1.4 and Kibana 4 (RC),

The install reports timeout errors starting Kibana, but it works just fine.

Keep on ELKing :)

]]> By: Thim http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19086 Thu, 12 Feb 2015 16:37:07 +0000 http://blog.comperiosearch.com/?p=2813#comment-19086 Hi,

I got a conflict during the puppet run due to a duplicated declaration of the class Java:

Error: Duplicate declaration: Class[Java] is already declared in file /vagrant/manifests/default.pp:26; cannot redeclare at /etc/puppet/modules/elasticsearch/manifests/init.pp:331 on node precise64

I commented line 26 out in /vagrant/manifests/default.pp and it worked for me after i triggered a new puupet run: puppet apply /vagrant/manifests/default.pp

Thanks for the great vagrant box, it is really easy!!

]]> By: er4z0r http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19074 Fri, 30 Jan 2015 08:11:00 +0000 http://blog.comperiosearch.com/?p=2813#comment-19074 Seems like the permissions for kibana are not correct/have changed.
When connecting to http://localhost:5601 I receive a 403 Forbidden from nginx.

]]> By: stephan stachurski http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19073 Wed, 28 Jan 2015 21:14:07 +0000 http://blog.comperiosearch.com/?p=2813#comment-19073 I’m kind of new to the ELK stack, so I might be missing something basic here, but I’m having a hard time getting logstash to actually read any data and put it in elasticsearch.

I have modified the logstash.conf file to remove the index and template that you set: https://gist.github.com/anonymous/eace13f91498dbf49970

I was not too sure about the index, but I had to remove the path to the template otherwise I kept getting an error in the logstash log.

I put a bunch of log files in /vagrant/project/logs as indicated in the logstash conf.

Even though I have fully reloaded the VM, it seems like none of the data in my log files is getting pulled in. For example, when I check this URL– http://localhost:9200/_search?pretty — I see 1 hit in index kibana-int. I don’t see anything from the log files I put in the log dir above.

Lastly, it looks like logstash is configured to reload whenever a configuration file changes, but I’m having trouble observing that behavior. I can see that the PID changes of the java process that’s running logstash, but I don’t see any output in /var/logs/logstash/logstash.*

Even if I deliberately put an error in my logstash conf, I see no output in the logs. If I reload the vagrant VM, I see the error I would expect. This seems inconsistent and I’m not sure what’s going on.

Thanks very much for this post.

]]> By: Martin mortensen http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19065 Fri, 14 Nov 2014 12:08:21 +0000 http://blog.comperiosearch.com/?p=2813#comment-19065 Hey Nik.
Most likely this is because you are running a version of Vagrant older than 1.5*. You get version 1.4-something if you install it through apt-get on Ubuntu.

Please try downloading the latest version from http://www.vagrantup.com and try again.
And if you want you can run
vagrant init ubuntu/trusty64
instead, to get a newer version of Ubuntu.

]]> By: Nik http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19061 Thu, 06 Nov 2014 08:34:43 +0000 http://blog.comperiosearch.com/?p=2813#comment-19061 The box ‘hashicorp/precise64′ could not be found.

]]> By: Murhaf Fares http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19054 Tue, 21 Oct 2014 12:54:19 +0000 http://blog.comperiosearch.com/?p=2813#comment-19054 Thanks Anastasios!

The issue is now fixed, please see: https://github.com/comperiosearch/vagrant-elk-box/issues/2

]]> By: Anastasios http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19053 Tue, 21 Oct 2014 10:27:30 +0000 http://blog.comperiosearch.com/?p=2813#comment-19053 Yes, I think the elasticsearch is not running.

Don’t you want ES to be running?

https://github.com/comperiosearch/vagrant-elk-box/issues/2

Best,
Anastasios

]]> By: Murhaf Fares http://blog.comperiosearch.com/blog/2014/08/14/elk-one-vagrant-box/#comment-19052 Tue, 21 Oct 2014 09:09:55 +0000 http://blog.comperiosearch.com/?p=2813#comment-19052 It is likely that the elasticsearch service is not running, did you check it?

]]>