ELK no docker

Commands:

docker run -d -v "$PWD/esdata":/usr/share/elasticsearch/data --name es elasticsearch:5.2.2

docker run -d --name logstash --link es:elasticsearch -v "$PWD":/config-dir logstash:5.2.2 -f /config-dir/logstash.conf

docker run --name kibana --link es:elasticsearch -p 5601:5601 -d kibana:5.2.2

docker run -d --net=host --name nginx --log-driver=gelf --log-opt gelf-address=udp://$(docker inspect --format '{{ .NetworkSettings.IPAddress }}' logstash):12201 --log-opt tag="Imagem:{{.ImageName}} - Nome:{{.Name}} - ID:{{.ID}}" -p 80:80 nginx

Have a logstash.conf in your working dir with:

input {
  gelf {}
}
output {
  elasticsearch {
    hosts => ["elasticsearch:9200"]
  }
}

See nginx at http://localhost See kibana at http://localhost:5601

caduvieira/Docker Logs to ELK - GELF.md