# Running ELK Stack - Lab Environment - Ubuntu **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [May 12, 2021, 4:05pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827 "2021-05-12T16:05:05Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![momo1104](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Post date:** [May 12, 2021, 4:05pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/1 "2021-05-12T16:05:05Z")
a newbie trying to integrate zeek logs and import them to elk stack. Running a lab environment inside Ubuntu 20.04. Elk stack running using Google Cloud Platform Tried to config filebeats, but I might be getting the configurations wrong. I tried googling and youtubing the installation process, but unsuccessful. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [May 12, 2021, 10:13pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/2 "2021-05-12T22:13:11Z")
Welcome to our community! 😃 It's not clear what problems you are having here. You will need to share a bit more detail. ---
**Author:** ![momo1104](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Post date:** [May 14, 2021, 5:26pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/3 "2021-05-14T17:26:09Z")
So basically I've built a lab environment on a vm. My goal is to send zeek logs to elk stack. Now I am very new to ubuntu, let alone install and config zeek and elk stack to work. I think my yml files are not being configured correctly but the problem can be a number of other things. I was able to install zeek, elk stack and filebeat (following youtube videos) but the problem lies in connecting the two to work in conjunction. Where do I begin to look for solutions? ---
**Author:** ![momo1104](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Post date:** [May 14, 2021, 5:34pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/4 "2021-05-14T17:34:21Z")
sudo: /etc/filebeat/modules.d/zeek.yml: command not found ubuntu@ubuntu-virtual-machine:~$ sudo vim /etc/filebeat/modules.d/zeek.yml ubuntu@ubuntu-virtual-machine:~$ ubuntu@ubuntu-virtual-machine:~$ sudo filebeat setup Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at [http://localhost:9200](http://localhost:9200): Get "[http://localhost:9200](http://localhost:9200)": dial tcp 127.0.0.1:9200: connect: connection refused] ubuntu@ubuntu-virtual-machine:~$ ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [May 17, 2021, 12:16am UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/5 "2021-05-17T00:16:18Z")
What video was it? What do your Elasticsearch logs show? ---
**Author:** ![momo1104](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Post date:** [May 20, 2021, 6:01pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/6 "2021-05-20T18:01:41Z")
i was able to figure out the problem --the input output paths had to be configured. ---
**Author:** ![momo1104](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Post date:** [May 20, 2021, 6:03pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/7 "2021-05-20T18:03:24Z")
![image](https://us1.discourse-cdn.com/elastic/original/3X/7/7/771e49066f2cc082b778833274e9e0ba52dacd29.png) Is this how a normal home screen should look like? alot of the videos show "elastic kibana" and look different to mine. Any suggestions? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [May 20, 2021, 6:26pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/8 "2021-05-20T18:26:23Z")
Yup ... Looks Good Technically that is the Analytics Overview Page. The Home is the little "Home" button at the top. The Elastic Stack and Kibana in particular have going through a lot of innovation / refinement recently so docs / video etc fall out of date quickly. The basic concepts remain the same though. ---
**Author:** ![momo1104](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Post date:** [May 20, 2021, 6:30pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/9 "2021-05-20T18:30:00Z")
Stephen - thanks for the response, appreciate it, i was pulling my hair trying to it figure out. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 17, 2021, 8:30pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827/10 "2021-06-17T20:30:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.