appcontainers/logstash repository overview

Built from appcontainers/centos65

Build container using default values.

docker build -t appcontainers/logstash .

Running the container

The container is built to allow several configurable variables to be passed in at runtime. The values are as follows:

• FQDN - This is the fully qualified domain name such as example.com. This should be passed without any prefix such as www⁠.

Run the container using default values

docker run -d -it --name logstash -h logstash -p 81:80 -p 9200:9200 -p 9300:9300 -p 5000:5000 appcontainers/logstash

This will assume the following

• FQDN = kibana.local

Run the container substituting the $varables with your own custom values

docker run -d -i -t \
--name logstash \
-h logstash \
-p 81:80 \
-p 9200:9200 \
-p 9300:9300 \
-p 5000:5000 \
-e FQDN='testapp.com' \
appcontainers/logstash

Navigate to the IP address of the server on the port specified (81 default) to access the main Kibana Dashboard

Important Note: This container uses a certificate to communicate with all configured logstash-forwarders. Backup up the generated certifciate, as a new certificate will be generated if the container is rebuilt (not re-ran). The certificate can be found in /etc/pki/tls/certs and /etc/pki/tls/private for the key