Run the ELK stack the "Docker" way.
Currently to get this setup working you will need to do the following:
Run docker-compose up
or docker-compose up -d
from the root of this repo to start up the ELK stack.
To change the default behavior of any of the individual components there are a few environment variables you can adjust.
For example, you can modify the default amount of heap memory used for Elasticsearch by editing the ES_JAVA_OPTS=-Xmx1g -Xms1g
values in the elasticsearch definition of the docker-compose.yml file.
Similarly, you can adjust the heap memory for Logstash by editing the LS_HEAP_SIZE=2048m
section in the logstash definition.
The default values for these are 1GB (for ES) and 2GB (for Logstash).