This is just an update of the Centralizing
Logs
post.
The solution is more mature and it's getting easier and easier to
install all the components.
Elasticsearch Logstash and Kibana are now part of the ELK stack.
So here we go:
[cc lang='bash']
# java 7 required
## on debian 7
\$ apt-get install openjdk-7-jre-headless
## on debian 6 only java 6 is available, so we need to do a trick
\$ echo 'deb http://ppa.launchpad.net/webupd8team/java/ubuntu precise
main' >> /etc/apt/sources.list
\$ apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys
EEA14886
\$ apt-get update && apt-get install oracle-java7-installer -y
\$ wget -qO - http://packages.elasticsearch.org/GPG-KEY-elasticsearch |
apt-key add -
\$ echo 'deb http://packages.elasticsearch.org/elasticsearch/1.3/debian
stable main' >> /etc/apt/sources.list
\$ apt-get update && apt-get install elasticsearch
\$ update-rc.d elasticsearch defaults
\$ vi /etc/default/elasticsearch
\$ vi /etc/elasticsearch/elasticsearch.yml
\$ /etc/init.d/elasticsearch start
\$ echo 'deb http://packages.elasticsearch.org/logstash/1.4/debian
stable main' >> /etc/apt/sources.list
\$ apt-get update && apt-get install logstash
\$ update-rc.d logstash defaults
\$ vi /etc/default/logstash
\$ vi /etc/logstash/conf.d/logstash.conf
\$ /etc/init.d/logstash start
[/cc]