After upgrading to Elasticsearch 2.0 (running on Debian 8 “Jessie”), I noticed it didn’t start automatically anymore. A service elasticsearch status returned this:
● elasticsearch.service - Elasticsearch
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled)
Active: active (running) since Fri 2015-10-30 23:27:04 CET; 23min ago
Notice the disabled part? You need to manually enable it again.
Today we will be sending alerts from my Cisco ASA firewall to Kibana. As I was looking how to configure this, I found some examples of how to do this, but none of them really worked, so I started “hobbying” myself and created something that works really well.
I needed a more convenient way to view my Apache access logs, other than tailing the access logs files on my webserver. Why not use Kibana for this? It not only shows you the access log lines, it also lets you create nice graphs about visitors, response codes, user agents, etcetera.