logstash elk

rsyslog
logstash
elasticsearch
kibana

 1073  logger -n 192.168.27.236 -P 516 fw
 1074  logger -n 192.168.27.236 -P 516 -d fw
 1075  logger -d -n 192.168.27.236 -P 516 fw
 1076  logger -d -n 192.168.27.236 -P 515 waf
 1077  logger -d -n 192.168.27.236 -P 515 product-waf-2020.07.09

[root@localhost /]# 
[root@localhost /]# curl -k http://192.168.27.236:9200
{"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}[root@localhost /]# 
[root@localhost /]# 
[root@localhost /]# 
[root@localhost /]# 
[root@localhost /]# curl --user elastic:venusvcloud2020 -XGET http://192.168.27.236:9200
{
  "name" : "elk",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "3Fq1VH9GQ5yYW0mDlIN8nw",
  "version" : {
    "number" : "7.4.0",
    "build_flavor" : "default",
    "build_type" : "tar",
    "build_hash" : "22e1767283e61a198cb4db791ea66e3f11ab9910",
    "build_date" : "2019-09-27T08:36:48.569419Z",
    "build_snapshot" : false,
    "lucene_version" : "8.2.0",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}
[root@localhost /]#