Confusion setting up Filebeats for NGINX, Logstash, and ElasticSearch


(Stu Weir) #1

Following the documentation for Setting up Filebeats for NGINX, I got to this page here:

https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-nginx.html

However it is unclear how I actually install the module. Does it already come preinstalled with Elasticsearch instances? In the Module overview ( https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-overview.html ) it mentions Ingest Nodes, but when I go to the page on Ingest Nodes ( https://www.elastic.co/guide/en/elasticsearch/reference/5.4/ingest.html ) it simply tells me to define a pipeline ( https://www.elastic.co/guide/en/elasticsearch/reference/5.4/pipeline.html ) at which point there is only a small amount of information on Pipelines.

So my question simply is: how do I get that NGINX dashboard? Do I need to define pipelines? If so, are those defined on ElasticSearch or Logstash? where do these files go? How are they formatted? It's very unclear when I have to follow multiple links to wind up at a page with the equivalent of 1 paragraph worth of material on the topic.

Thanks for any and all help.

-Stu


(ruflin) #2

Best check out the tutorial here: https://www.elastic.co/guide/en/beats/filebeat/current/_tutorial.html This should contain all the details you were asking for above.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.