# Getting started on a Mac (Splunk user looking to migrate)

**URL:** https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791
**Category:** Elasticsearch
**Created:** [February 14, 2014, 1:52am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791 "2014-02-14T01:52:41Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Phoenix\_Kiula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phoenix_kiula/32/1795_2.png) [@Phoenix\_Kiula](https://discuss.elastic.co/u/Phoenix_Kiula)
#### Post date: [February 14, 2014, 1:52am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/1 "2014-02-14T01:52:41Z")

</div>

Hi. I'm somewhat familiar with Splunk, because our company invested in it.  
Now it's proving to be expensive so we're looking for alternatives. (It's a  
super tool though)

ElasticSearch was recommended on Quora. But downloading and trying to  
install it is hideous. This seems for tech nerds. Or am I missing  
something? I'm on a Mac OSX and want to try it out. The Splunk or SumoLogic  
installs were 10 seconds and I was up and running.

Could someone please point me to a simple guide to:

1. Install the whole thing: including "LogStash" and "Kibana", because just  
searching is not what I wish to do, I want to make sense of the data and  
therefore dashboarding is important. I couldn't find a simple step by step  
tutorial or guide on the website to install this whole stack. Google turns  
up stuff like this --  
[http://red-badger.com/blog/2013/11/08/getting-started-with-elasticsearch/](http://red-badger.com/blog/2013/11/08/getting-started-with-elasticsearch/) --  
which is ridiculously dysfunctional. (And I don't want to install "brew"  
just to install simple stuff.)

2. Secondly, once installed, I'd like to know how to simply get the data  
into the index from:  
a) a MySQL database  
b) a folder with XML files...I want to slurp all the files into the  
index, and then incrementally only get new files in the future  
c) a folder with text log files...and same incremental auto-pickup as (b)  
above

Don't seem to find a simple non-geeky guide to do this. I'm a programmer in  
PHP and web technologies (JS etc), and manage my own dedicated Linux  
hosting, so not averse to code or commands, but want to find some coherent  
and simple guide.

1. Thirdly, the demo.kibana.org is hideous. It looks like the best way to  
UN-sell this technology. Is there a better place I could see actual Kibana  
in use, you know, with a proper dashboard that doesn't look like a screen  
from The Matrix in dark black? I'm looking for a business dashboard with  
proper dropdown based filters etc. And the ability perhaps to use third  
party libraries such as D3 JS.

Finally, where's the pricing info? Is ElasticSearch completely free?  
There's no pricing info anywhere, only the cost of helping out. Is this why  
the documentation etc is so poor so that they can charge for helping?

Many thanks for any pointers. I really want to give this a shot.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 14, 2014, 2:02am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/2 "2014-02-14T02:02:24Z")

</div>

ES is free as it's open source.  
You might want to take a look here [Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.3.3/learn) as  
it has a good getting started guide.

Regards,  
Mark Walkom

Infrastructure Engineer  
Campaign Monitor  
email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com)  
web: [www.campaignmonitor.com](http://www.campaignmonitor.com)

On 14 February 2014 12:52, Phoenix Kiula [phoenix.kiula@gmail.com](mailto:phoenix.kiula@gmail.com) wrote:

> Hi. I'm somewhat familiar with Splunk, because our company invested in it.  
> Now it's proving to be expensive so we're looking for alternatives. (It's a  
> super tool though)
> 
> Elasticsearch was recommended on Quora. But downloading and trying to  
> install it is hideous. This seems for tech nerds. Or am I missing  
> something? I'm on a Mac OSX and want to try it out. The Splunk or SumoLogic  
> installs were 10 seconds and I was up and running.
> 
> Could someone please point me to a simple guide to:
> 
> 1. Install the whole thing: including "LogStash" and "Kibana", because  
> just searching is not what I wish to do, I want to make sense of the data  
> and therefore dashboarding is important. I couldn't find a simple step by  
> step tutorial or guide on the website to install this whole stack. Google  
> turns up stuff like this --  
> [Our Thinking | All Insights & Resources | Red Badger](http://red-badger.com/blog/2013/11/08/getting-started-with-elasticsearch/) --  
> which is ridiculously dysfunctional. (And I don't want to install "brew"  
> just to install simple stuff.)
> 
> 2. Secondly, once installed, I'd like to know how to simply get the data  
> into the index from:  
> a) a MySQL database  
> b) a folder with XML files...I want to slurp all the files into the  
> index, and then incrementally only get new files in the future  
> c) a folder with text log files...and same incremental auto-pickup as  
> (b) above
> 
> Don't seem to find a simple non-geeky guide to do this. I'm a programmer  
> in PHP and web technologies (JS etc), and manage my own dedicated Linux  
> hosting, so not averse to code or commands, but want to find some coherent  
> and simple guide.
> 
> 1. Thirdly, the [demo.kibana.org](http://demo.kibana.org) is hideous. It looks like the best way to  
> UN-sell this technology. Is there a better place I could see actual Kibana  
> in use, you know, with a proper dashboard that doesn't look like a screen  
> from The Matrix in dark black? I'm looking for a business dashboard with  
> proper dropdown based filters etc. And the ability perhaps to use third  
> party libraries such as D3 JS.
> 
> Finally, where's the pricing info? Is Elasticsearch completely free?  
> There's no pricing info anywhere, only the cost of helping out. Is this why  
> the documentation etc is so poor so that they can charge for helping?
> 
> Many thanks for any pointers. I really want to give this a shot.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com)  
> .  
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624Z6zsayrKYtgEVWS8MKqDo9gNy20MNxQ77%3Dkq9duzVeqw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624Z6zsayrKYtgEVWS8MKqDo9gNy20MNxQ77%3Dkq9duzVeqw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![Phoenix\_Kiula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phoenix_kiula/32/1795_2.png) [@Phoenix\_Kiula](https://discuss.elastic.co/u/Phoenix_Kiula)
#### Post date: [February 14, 2014, 2:37am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/3 "2014-02-14T02:37:30Z")

</div>

Thank you for this. But that page, including the getting started guide, is  
nowhere close to what I requested. I need to install Elasticsearch, then  
LogStash and Kibana -- which I understand is the set of tools I need to get  
anywhere close to Splunk or SumoLogic. Right? Where's the guide to install  
all of them on Mac OSX and start playing around with "localhost", and  
coding in PHP?

Apologies if this sounds onerous, but my request is fairly simple and  
straightforward even for an open source tool. There's a lot of effort on  
the ES website to showcase case studies and whatnot. A bit of effort in  
helping people actually get started without a PhD would be great too!

Maybe I'm just missing something.

Thanks

On Friday, February 14, 2014 10:02:24 AM UTC+8, Mark Walkom wrote:

> ES is free as it's open source.  
> You might want to take a look here [Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.3.3/learnas) it has a good getting started guide.
> 
> Regards,  
> Mark Walkom
> 
> Infrastructure Engineer  
> Campaign Monitor  
> email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) \<javascript:\>  
> web: [www.campaignmonitor.com](http://www.campaignmonitor.com)
> 
> On 14 February 2014 12:52, Phoenix Kiula \<[phoeni...@gmail.com](mailto:phoeni...@gmail.com)\<javascript:\>
> 
> > wrote:
> 
> > Hi. I'm somewhat familiar with Splunk, because our company invested in  
> > it. Now it's proving to be expensive so we're looking for alternatives.  
> > (It's a super tool though)
> > 
> > Elasticsearch was recommended on Quora. But downloading and trying to  
> > install it is hideous. This seems for tech nerds. Or am I missing  
> > something? I'm on a Mac OSX and want to try it out. The Splunk or SumoLogic  
> > installs were 10 seconds and I was up and running.
> > 
> > Could someone please point me to a simple guide to:
> > 
> > 1. Install the whole thing: including "LogStash" and "Kibana", because  
> > just searching is not what I wish to do, I want to make sense of the data  
> > and therefore dashboarding is important. I couldn't find a simple step by  
> > step tutorial or guide on the website to install this whole stack. Google  
> > turns up stuff like this --  
> > [Our Thinking | All Insights & Resources | Red Badger](http://red-badger.com/blog/2013/11/08/getting-started-with-elasticsearch/) --  
> > which is ridiculously dysfunctional. (And I don't want to install "brew"  
> > just to install simple stuff.)
> > 
> > 2. Secondly, once installed, I'd like to know how to simply get the data  
> > into the index from:  
> > a) a MySQL database  
> > b) a folder with XML files...I want to slurp all the files into the  
> > index, and then incrementally only get new files in the future  
> > c) a folder with text log files...and same incremental auto-pickup as  
> > (b) above
> > 
> > Don't seem to find a simple non-geeky guide to do this. I'm a programmer  
> > in PHP and web technologies (JS etc), and manage my own dedicated Linux  
> > hosting, so not averse to code or commands, but want to find some coherent  
> > and simple guide.
> > 
> > 1. Thirdly, the [demo.kibana.org](http://demo.kibana.org) is hideous. It looks like the best way  
> > to UN-sell this technology. Is there a better place I could see actual  
> > Kibana in use, you know, with a proper dashboard that doesn't look like a  
> > screen from The Matrix in dark black? I'm looking for a business dashboard  
> > with proper dropdown based filters etc. And the ability perhaps to use  
> > third party libraries such as D3 JS.
> > 
> > Finally, where's the pricing info? Is Elasticsearch completely free?  
> > There's no pricing info anywhere, only the cost of helping out. Is this why  
> > the documentation etc is so poor so that they can charge for helping?
> > 
> > Many thanks for any pointers. I really want to give this a shot.
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups  
> > "elasticsearch" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an  
> > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com)  
> > .  
> > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/d014a3f4-e3d3-4960-9242-b935eaaedf8e%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d014a3f4-e3d3-4960-9242-b935eaaedf8e%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 14, 2014, 2:59am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/4 "2014-02-14T02:59:27Z")

</div>

OS X isn't a fully supported OS, in that there are no pkg's for the 3  
components, so you'll have to run the jar/bin's after grabbing the tgz  
packages from the site if you want to do it in your native environment.  
I'd recommend that you spin up a linux VM and try it in there as it's a  
simpler process.

Here's a few run throughs that a search turned up;  
[https://en.opensuse.org/User:Tsu2/Install\_and\_Intro\_Logstash-Elasticsearch-Kibana](https://en.opensuse.org/User:Tsu2/Install_and_Intro_Logstash-Elasticsearch-Kibana)  
[http://www.jaddog.org/2014/01/16/openstack-logstash-elasticsearch-kibana/](http://www.jaddog.org/2014/01/16/openstack-logstash-elasticsearch-kibana/)  
[http://docs.fluentd.org/articles/free-alternative-to-splunk-by-fluentd](http://docs.fluentd.org/articles/free-alternative-to-splunk-by-fluentd)  
[http://www.vmdoh.com/blog/centralizing-logs-lumberjack-logstash-and-elasticsearch](http://www.vmdoh.com/blog/centralizing-logs-lumberjack-logstash-and-elasticsearch)

Regards,  
Mark Walkom

Infrastructure Engineer  
Campaign Monitor  
email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com)  
web: [www.campaignmonitor.com](http://www.campaignmonitor.com)

On 14 February 2014 13:37, Phoenix Kiula [phoenix.kiula@gmail.com](mailto:phoenix.kiula@gmail.com) wrote:

> Thank you for this. But that page, including the getting started guide, is  
> nowhere close to what I requested. I need to install Elasticsearch, then  
> LogStash and Kibana -- which I understand is the set of tools I need to get  
> anywhere close to Splunk or SumoLogic. Right? Where's the guide to install  
> all of them on Mac OSX and start playing around with "localhost", and  
> coding in PHP?
> 
> Apologies if this sounds onerous, but my request is fairly simple and  
> straightforward even for an open source tool. There's a lot of effort on  
> the ES website to showcase case studies and whatnot. A bit of effort in  
> helping people actually get started without a PhD would be great too!
> 
> Maybe I'm just missing something.
> 
> Thanks
> 
> On Friday, February 14, 2014 10:02:24 AM UTC+8, Mark Walkom wrote:
> 
> > ES is free as it's open source.  
> > You might want to take a look here [Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.3.3/learnas) it has a good getting started guide.
> > 
> > Regards,  
> > Mark Walkom
> > 
> > Infrastructure Engineer  
> > Campaign Monitor  
> > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com)  
> > web: [www.campaignmonitor.com](http://www.campaignmonitor.com)
> > 
> > On 14 February 2014 12:52, Phoenix Kiula [phoeni...@gmail.com](mailto:phoeni...@gmail.com) wrote:
> > 
> > > Hi. I'm somewhat familiar with Splunk, because our company invested in  
> > > it. Now it's proving to be expensive so we're looking for alternatives.  
> > > (It's a super tool though)
> > > 
> > > Elasticsearch was recommended on Quora. But downloading and trying to  
> > > install it is hideous. This seems for tech nerds. Or am I missing  
> > > something? I'm on a Mac OSX and want to try it out. The Splunk or SumoLogic  
> > > installs were 10 seconds and I was up and running.
> > > 
> > > Could someone please point me to a simple guide to:
> > > 
> > > 1. Install the whole thing: including "LogStash" and "Kibana", because  
> > > just searching is not what I wish to do, I want to make sense of the data  
> > > and therefore dashboarding is important. I couldn't find a simple step by  
> > > step tutorial or guide on the website to install this whole stack. Google  
> > > turns up stuff like this -- [All Articles | Our Thinking | Red Badger Insights](http://red-badger.com/blog/)  
> > > 2013/11/08/getting-started-with-elasticsearch/ -- which is ridiculously  
> > > dysfunctional. (And I don't want to install "brew" just to install simple  
> > > stuff.)
> > > 
> > > 2. Secondly, once installed, I'd like to know how to simply get the data  
> > > into the index from:  
> > > a) a MySQL database  
> > > b) a folder with XML files...I want to slurp all the files into the  
> > > index, and then incrementally only get new files in the future  
> > > c) a folder with text log files...and same incremental auto-pickup as  
> > > (b) above
> > > 
> > > Don't seem to find a simple non-geeky guide to do this. I'm a programmer  
> > > in PHP and web technologies (JS etc), and manage my own dedicated Linux  
> > > hosting, so not averse to code or commands, but want to find some coherent  
> > > and simple guide.
> > > 
> > > 1. Thirdly, the [demo.kibana.org](http://demo.kibana.org) is hideous. It looks like the best way  
> > > to UN-sell this technology. Is there a better place I could see actual  
> > > Kibana in use, you know, with a proper dashboard that doesn't look like a  
> > > screen from The Matrix in dark black? I'm looking for a business dashboard  
> > > with proper dropdown based filters etc. And the ability perhaps to use  
> > > third party libraries such as D3 JS.
> > > 
> > > Finally, where's the pricing info? Is Elasticsearch completely free?  
> > > There's no pricing info anywhere, only the cost of helping out. Is this why  
> > > the documentation etc is so poor so that they can charge for helping?
> > > 
> > > Many thanks for any pointers. I really want to give this a shot.
> > > 
> > > --  
> > > You received this message because you are subscribed to the Google  
> > > Groups "elasticsearch" group.  
> > > To unsubscribe from this group and stop receiving emails from it, send  
> > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%  
> > > [40googlegroups.com](http://40googlegroups.com).  
> > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups  
> > "elasticsearch" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an  
> > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/d014a3f4-e3d3-4960-9242-b935eaaedf8e%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d014a3f4-e3d3-4960-9242-b935eaaedf8e%40googlegroups.com)  
> > .  
> > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624YFx99PUgVhyjwh4qBsGaUE4rPzsd%2Bnhei\_2xgGYNXmvg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624YFx99PUgVhyjwh4qBsGaUE4rPzsd%2Bnhei_2xgGYNXmvg%40mail.gmail.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![jprante](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jprante/32/44941_2.png) [@jprante](https://discuss.elastic.co/u/jprante)
#### Post date: [February 14, 2014, 9:07am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/5 "2014-02-14T09:07:47Z")

</div>

Please, I'd like to forward you to the nice Elasticsearch company to ask  
them if they can provide the service you request, for example, something  
like a native Mac OS X dmg package of the ELK stack, with OOTB experience.

I'm quite sure they have something like this in the pipeline, because  
expectations are getting higher and higher.

The community mailinglist can help if you have questions about  
Elasticsearch. Elasticsearch is not a Splunk replacement but a search  
engine that can power such platforms. Many apps can be added to ES, and  
Splunk-like apps are just one possibility. Don't be annoyed because you  
just tried to install the backbone of a whole platform.

If your question 2a) about MySQL is separate from this, you could try the  
JDBC river plugin I wrote.

> **[GitHub - jprante/elasticsearch-jdbc: JDBC importer for Elasticsearch](https://github.com/jprante/elasticsearch-jdbc)**
>
> JDBC importer for Elasticsearch. Contribute to jprante/elasticsearch-jdbc development by creating an account on GitHub.

It is built to pull quickly DB result sets out of any JDBC source with SQL  
statements and index JSON documents into Elasticsearch, without deeper  
knowledge of programming JDBC or ES. It's ideal to get some feet wet for  
PoCs and live showcases. It's not a full-fledged solution for every use  
case though. You are free to adapt the JDBC river to your needs, it's open  
source.

There are other river plugins or solutions available for question 2b) and  
2c) like for example [http://www.scrutmydocs.org/](http://www.scrutmydocs.org/)

As you have noticed, there is no pricing info about Elasticsearch. It's  
source code is licensed with Apache License 2.0 and it is free to download,  
compile, modify, and distribute. That means, you can build your business  
around it, build dashboards as you like etc.

Ask the company for service, I'm sure they can help you.

Jörg

On Fri, Feb 14, 2014 at 2:52 AM, Phoenix Kiula [phoenix.kiula@gmail.com](mailto:phoenix.kiula@gmail.com)wrote:

> Hi. I'm somewhat familiar with Splunk, because our company invested in it.  
> Now it's proving to be expensive so we're looking for alternatives. (It's a  
> super tool though)
> 
> Elasticsearch was recommended on Quora. But downloading and trying to  
> install it is hideous. This seems for tech nerds. Or am I missing  
> something? I'm on a Mac OSX and want to try it out. The Splunk or SumoLogic  
> installs were 10 seconds and I was up and running.
> 
> Could someone please point me to a simple guide to:
> 
> 1. Install the whole thing: including "LogStash" and "Kibana", because  
> just searching is not what I wish to do, I want to make sense of the data  
> and therefore dashboarding is important. I couldn't find a simple step by  
> step tutorial or guide on the website to install this whole stack. Google  
> turns up stuff like this --  
> [Our Thinking | All Insights & Resources | Red Badger](http://red-badger.com/blog/2013/11/08/getting-started-with-elasticsearch/) --  
> which is ridiculously dysfunctional. (And I don't want to install "brew"  
> just to install simple stuff.)
> 
> 2. Secondly, once installed, I'd like to know how to simply get the data  
> into the index from:  
> a) a MySQL database  
> b) a folder with XML files...I want to slurp all the files into the  
> index, and then incrementally only get new files in the future  
> c) a folder with text log files...and same incremental auto-pickup as  
> (b) above
> 
> Don't seem to find a simple non-geeky guide to do this. I'm a programmer  
> in PHP and web technologies (JS etc), and manage my own dedicated Linux  
> hosting, so not averse to code or commands, but want to find some coherent  
> and simple guide.
> 
> 1. Thirdly, the [demo.kibana.org](http://demo.kibana.org) is hideous. It looks like the best way to  
> UN-sell this technology. Is there a better place I could see actual Kibana  
> in use, you know, with a proper dashboard that doesn't look like a screen  
> from The Matrix in dark black? I'm looking for a business dashboard with  
> proper dropdown based filters etc. And the ability perhaps to use third  
> party libraries such as D3 JS.
> 
> Finally, where's the pricing info? Is Elasticsearch completely free?  
> There's no pricing info anywhere, only the cost of helping out. Is this why  
> the documentation etc is so poor so that they can charge for helping?
> 
> Many thanks for any pointers. I really want to give this a shot.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%40googlegroups.com)  
> .  
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAKdsXoFykrRWfWEPeoq%2BcuN0iyPrEyhOt7HuafNOPmFgcRUOhA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAKdsXoFykrRWfWEPeoq%2BcuN0iyPrEyhOt7HuafNOPmFgcRUOhA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![Tony\_Su](https://avatars.discourse-cdn.com/v4/letter/t/8dc957/32.png) [@Tony\_Su](https://discuss.elastic.co/u/Tony_Su)
#### Post date: [February 14, 2014, 3:07pm UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/6 "2014-02-14T15:07:49Z")

</div>

Hello,  
I've updated the info on my page which contains fairly old info (approx. ES  
0.90.3)  
_[User:Tsu2/Install and Intro Logstash-Elasticsearch-Kibana - openSUSE Wiki](https://en.opensuse.org/User:Tsu2/Install_and_Intro_Logstash-Elasticsearch-Kibana)_[https://en.opensuse.org/User:Tsu2/Install\_and\_Intro\_Logstash-Elasticsearch-Kibana](https://en.opensuse.org/User:Tsu2/Install_and_Intro_Logstash-Elasticsearch-Kibana)  
to  
[User:Tsu2/elasticsearch 1.0 - openSUSE Wiki](http://en.opensuse.org/User:Tsu2/elasticsearch_1.0#Running_Logstash)

In the new, updated page I "preview" the content in the Logstash tutorials.

Some stuff I cover  
The different options how to install and run Logstash, Elasticsearch,  
Kibana for the tutorials  
Breaks out a number of items which are often shown in the tutorials but  
with no description or highlighting. Stuff that's easy to overlook or  
confuse.

As Mark describes,  
Since no install pattern has been created for running on OSX, it's still  
fairly simple to invoke all three apps by running only Logstash or  
downloading and running the jar files. Jar files can be run from any  
location simply by command (no installation). You only need a suitable Java  
JRE (Oracle or openJDK 1.7 ordinarily should be sufficient).

Tony

On Thursday, February 13, 2014 6:59:27 PM UTC-8, Mark Walkom wrote:

> OS X isn't a fully supported OS, in that there are no pkg's for the 3  
> components, so you'll have to run the jar/bin's after grabbing the tgz  
> packages from the site if you want to do it in your native environment.  
> I'd recommend that you spin up a linux VM and try it in there as it's a  
> simpler process.  
> Here's a few run throughs that a search turned up;
> 
> [User:Tsu2/Install and Intro Logstash-Elasticsearch-Kibana - openSUSE Wiki](https://en.opensuse.org/User:Tsu2/Install_and_Intro_Logstash-Elasticsearch-Kibana)  
> [http://www.jaddog.org/2014/01/16/openstack-logstash-elasticsearch-kibana/](http://www.jaddog.org/2014/01/16/openstack-logstash-elasticsearch-kibana/)  
> [http://docs.fluentd.org/articles/free-alternative-to-splunk-by-fluentd](http://docs.fluentd.org/articles/free-alternative-to-splunk-by-fluentd)
> 
> [http://www.vmdoh.com/blog/centralizing-logs-lumberjack-logstash-and-elasticsearch](http://www.vmdoh.com/blog/centralizing-logs-lumberjack-logstash-and-elasticsearch)
> 
> Regards,  
> Mark Walkom
> 
> Infrastructure Engineer  
> Campaign Monitor  
> email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) \<javascript:\>  
> web: [www.campaignmonitor.com](http://www.campaignmonitor.com)
> 
> On 14 February 2014 13:37, Phoenix Kiula \<[phoeni...@gmail.com](mailto:phoeni...@gmail.com)\<javascript:\>
> 
> > wrote:
> 
> > Thank you for this. But that page, including the getting started guide,  
> > is nowhere close to what I requested. I need to install Elasticsearch, then  
> > LogStash and Kibana -- which I understand is the set of tools I need to get  
> > anywhere close to Splunk or SumoLogic. Right? Where's the guide to install  
> > all of them on Mac OSX and start playing around with "localhost", and  
> > coding in PHP?
> > 
> > Apologies if this sounds onerous, but my request is fairly simple and  
> > straightforward even for an open source tool. There's a lot of effort on  
> > the ES website to showcase case studies and whatnot. A bit of effort in  
> > helping people actually get started without a PhD would be great too!
> > 
> > Maybe I'm just missing something.
> > 
> > Thanks
> > 
> > On Friday, February 14, 2014 10:02:24 AM UTC+8, Mark Walkom wrote:
> > 
> > > ES is free as it's open source.  
> > > You might want to take a look here [Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.3.3/learnas) it has a good getting started guide.
> > > 
> > > Regards,  
> > > Mark Walkom
> > > 
> > > Infrastructure Engineer  
> > > Campaign Monitor  
> > > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com)  
> > > web: [www.campaignmonitor.com](http://www.campaignmonitor.com)
> > > 
> > > On 14 February 2014 12:52, Phoenix Kiula [phoeni...@gmail.com](mailto:phoeni...@gmail.com) wrote:
> > > 
> > > > Hi. I'm somewhat familiar with Splunk, because our company invested in  
> > > > it. Now it's proving to be expensive so we're looking for alternatives.  
> > > > (It's a super tool though)
> > > > 
> > > > Elasticsearch was recommended on Quora. But downloading and trying to  
> > > > install it is hideous. This seems for tech nerds. Or am I missing  
> > > > something? I'm on a Mac OSX and want to try it out. The Splunk or SumoLogic  
> > > > installs were 10 seconds and I was up and running.
> > > > 
> > > > Could someone please point me to a simple guide to:
> > > > 
> > > > 1. Install the whole thing: including "LogStash" and "Kibana", because  
> > > > just searching is not what I wish to do, I want to make sense of the data  
> > > > and therefore dashboarding is important. I couldn't find a simple step by  
> > > > step tutorial or guide on the website to install this whole stack. Google  
> > > > turns up stuff like this -- [All Articles | Our Thinking | Red Badger Insights](http://red-badger.com/blog/)  
> > > > 2013/11/08/getting-started-with-elasticsearch/ -- which is  
> > > > ridiculously dysfunctional. (And I don't want to install "brew" just to  
> > > > install simple stuff.)
> > > > 
> > > > 2. Secondly, once installed, I'd like to know how to simply get the  
> > > > data into the index from:  
> > > > a) a MySQL database  
> > > > b) a folder with XML files...I want to slurp all the files into the  
> > > > index, and then incrementally only get new files in the future  
> > > > c) a folder with text log files...and same incremental auto-pickup as  
> > > > (b) above
> > > > 
> > > > Don't seem to find a simple non-geeky guide to do this. I'm a  
> > > > programmer in PHP and web technologies (JS etc), and manage my own  
> > > > dedicated Linux hosting, so not averse to code or commands, but want to  
> > > > find some coherent and simple guide.
> > > > 
> > > > 1. Thirdly, the [demo.kibana.org](http://demo.kibana.org) is hideous. It looks like the best way  
> > > > to UN-sell this technology. Is there a better place I could see actual  
> > > > Kibana in use, you know, with a proper dashboard that doesn't look like a  
> > > > screen from The Matrix in dark black? I'm looking for a business dashboard  
> > > > with proper dropdown based filters etc. And the ability perhaps to use  
> > > > third party libraries such as D3 JS.
> > > > 
> > > > Finally, where's the pricing info? Is Elasticsearch completely free?  
> > > > There's no pricing info anywhere, only the cost of helping out. Is this why  
> > > > the documentation etc is so poor so that they can charge for helping?
> > > > 
> > > > Many thanks for any pointers. I really want to give this a shot.
> > > > 
> > > > --  
> > > > You received this message because you are subscribed to the Google  
> > > > Groups "elasticsearch" group.  
> > > > To unsubscribe from this group and stop receiving emails from it, send  
> > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > msgid/elasticsearch/10b30c8e-2554-437d-a48c-39ed38b4f0d3%  
> > > > [40googlegroups.com](http://40googlegroups.com).  
> > > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).
> > > 
> > > --  
> > > You received this message because you are subscribed to the Google Groups  
> > > "elasticsearch" group.  
> > > To unsubscribe from this group and stop receiving emails from it, send an  
> > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > > To view this discussion on the web visit  
> > > [https://groups.google.com/d/msgid/elasticsearch/d014a3f4-e3d3-4960-9242-b935eaaedf8e%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d014a3f4-e3d3-4960-9242-b935eaaedf8e%40googlegroups.com)  
> > > .  
> > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/ba40d848-e3c6-4a36-82c6-5f6e904aa639%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ba40d848-e3c6-4a36-82c6-5f6e904aa639%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:50am UTC](https://discuss.elastic.co/t/getting-started-on-a-mac-splunk-user-looking-to-migrate/15791/7 "2017-07-06T01:50:05Z")

</div>


