Categories: ELK

How to install ELK on Ubuntu 16.04

install ELK

install ELKIn this tutorial we will provide you with detailed instructions on how to install ELK (Elasticsearch, Logstash and Kibana) on Ubuntu 16.04.

A short introduction about the ELK stack

The ELK is a powerful and versatile stack for collect, analyze and explore data in real time. The components of an ELK are:

Elasticsearch – Search and analyze data in real time.

Logstash – Collect, enrich, and transport data.

Kibana – Explore and visualize data.

Tutorial

Step 1 – Install Java 8

This is a mandatory step once both Elasticsearch and Logstash require Java. We are recommending the Java 8 because so far is the most recent stable version.

First of all we need to add the Oracle Java PPA:

Then just update the apt package database and install the package oracle-java8-installer:

Just to confirm that Java was successfully installed you can the command bellow:

The expected output must be something similar to this:

Step 2 – Install Elasticsearch 2.X

After the Java installation we can now move on to the Elasticsearch. It can be installed with a package manager but we need first add the Elastic’s package source list. In order to do that just execute the following commands:

Update the apt package database and install the package elasticsearch:

Configure the elasticsearch to start on boot up:

Step 3 – Install Kibana 4.4.X

Before install Kibana we need to add the Elastic’s package source list.

Update the apt package database and install the package kibana:

Configure kibana’s service to start on boot up:

Step 4 – Install Logstash 2.2.X

Again, similar to how we installed Elasticsearch and Kibana, we need first add the Elastic’s package source list by executing the command:

Update the apt package database and install the package logstash:

Configure logstash’s service to start on boot up:

Conclusion

We just presented you the basic installation of the ELK stack. There’s much more that can be done, specially when talking about Logstash. It is really flexible and can be configured to receive messages (in so many protocols and formats), transform them using lots of filters and then forward all these structured messages to many outputs such as Elasticsearch.

Article info