I ran the elastic stack on docker compose and it is running well. But after a week 50GB of storage was filled with the service without any additional data. I did not provide any content yet, and it was completely clean. I guessed it was filled by logs that these machines are saving somewhere. I could not spot it as the service completely crashed due to low disk space to work.
So I am willing to do it again without logging. I have a fresh instance + docker-compose and the following YAML file:
version: '3.6'
services:
Elasticsearch:
image: elasticsearch:7.16.2
container_name: elasticsearch
restart: always
volumes:
- elastic_data:/usr/share/elasticsearch/data/
environment:
ES_JAVA_OPTS: "-Xmx256m -Xms256m"
discovery.type: single-node
ports:
- '9200:9200'
- '9300:9300'
networks:
- elk
storage_opt:
size: 10G
Logstash:
image: logstash:7.16.2
container_name: logstash
restart: always
volumes:
- /home/user/extvol/elk/logstash/logstash.conf:/etc/logstash/conf.d/logstash.conf:ro
command: logstash -f /etc/logstash/conf.d/logstash.conf
depends_on:
- Elasticsearch
ports:
- '9600:9600'
environment:
LS_JAVA_OPTS: "-Xmx256m -Xms256m"
networks:
- elk
storage_opt:
size: 10G
Kibana:
image: kibana:7.16.2
container_name: kibana
restart: always
ports:
- '5601:5601'
environment:
- ELASTICSEARCH_URL=http://elasticsearch:9200
depends_on:
- Elasticsearch
networks:
- elk
storage_opt:
size: 10G
volumes:
elastic_data: {}
networks:
elk:
This file failed to run because of storage_opt: size: 10G:
so I removed that and worked.
But how to stop automatic logging, not only from the screen but also from occupying the space of the disk?