Brand new to to the Elk Stack and I've been reading/lurking through lots of different stuff and my brain is getting fried as i can't seem to find information specific enough to a home lab. Any information would be appreciated!!
Goal: set up home lab environment to begin playing around.
- Home environment has a FW, Linux server, a couple endpoints and various wireless devices (haven't done to much research on this)
My question/problem: What do I run the ELK stack on for a small environment like this. Do I use a standalone server running Ubuntu (I see that 64GB ram is recommended. with 16GM being minimum) or will an old dusty laptops(s) suffice or can i use a single host with multiple VM's? I believe what's confusing me is all the moving parts within the stack (logstash, kibana etc.). Overall how many host's or guest os's are needed to run the stack? How does this work and what are you all running? as a side-note I'm low on $$ so would like to accomplish this fairly cheap but still have a reasonable environment Thanks in advance! I apologize if this has been covered, if so please just direct me to the url.