1 00:00:00,180 --> 00:00:04,950 OK, so now we're going to install a second prompt health service, so we'll have to prompt health running 2 00:00:04,950 --> 00:00:06,980 and we'll be able to query those in Karana. 3 00:00:07,050 --> 00:00:11,730 OK, so we have the lucky data source, we have the lucky service and we have the prompt health service 4 00:00:11,730 --> 00:00:14,010 all running on our Bafana's server. 5 00:00:14,040 --> 00:00:19,410 So in this one, I'm going to install a prompt health service on my MySchool server that we set up in 6 00:00:19,410 --> 00:00:23,940 this section and that will be pushing data to the Lokey service on the performance server. 7 00:00:24,000 --> 00:00:28,920 And this is to demonstrate that you can have as many prompt health services running wherever you want 8 00:00:28,920 --> 00:00:32,840 or pushing to the same lucky service and being able to query those in Griffon. 9 00:00:32,970 --> 00:00:36,300 But because they'll be running on different servers, there are quite a few considerations. 10 00:00:36,450 --> 00:00:41,460 So we'll start off by installing the prompt tale binary on the mosque, your server. 11 00:00:41,490 --> 00:00:47,550 I'm going to use pretty much the same process as was demonstrated in the install prompt binary installed 12 00:00:47,550 --> 00:00:48,420 as a service section. 13 00:00:48,420 --> 00:00:50,850 So I'm logging on to my my SQL server. 14 00:00:50,880 --> 00:00:53,580 OK, I'm going to install the same version. 15 00:00:53,580 --> 00:00:55,410 So City use a local bin. 16 00:00:55,440 --> 00:00:59,310 I'm going to install the same version that was two point four point one. 17 00:00:59,310 --> 00:01:05,830 The pronto Linux i amd64 going to unzip it in, flighting it should already have permissions. 18 00:01:05,850 --> 00:01:13,530 I can check that Ellis LRH and prompted Linux AMD64 already has execute permissions now to create a 19 00:01:13,530 --> 00:01:17,100 config screen in a config pronto or HTML. 20 00:01:17,430 --> 00:01:22,400 Or paste this in now remembering I'm actually changing my GOP support. 21 00:01:22,410 --> 00:01:25,100 You don't have to do this to 1997. 22 00:01:25,110 --> 00:01:28,080 This is so I can explicitly block that port later on. 23 00:01:28,080 --> 00:01:30,570 Using zero will assign a dynamic port. 24 00:01:30,570 --> 00:01:36,060 The client bureau will be my Safana server, so it's not pushing to a local wiki. 25 00:01:36,060 --> 00:01:41,400 Service is pushing to a like a server spreading across a network, and I set up my to my name Gryphon 26 00:01:41,400 --> 00:01:44,930 ISP Code Dot Net to point to the IP address of microphone server. 27 00:01:44,970 --> 00:01:48,930 It was sent to Port 3100 Loki API version one push. 28 00:01:49,110 --> 00:01:52,980 The scribe config is the same will be targeting local hosts. 29 00:01:53,100 --> 00:01:58,840 We have a job called VAR logs and we're reading all the files in the path VAR log style log. 30 00:01:58,860 --> 00:02:03,840 Now, when the star was pushed to the Loki service, there is no indication that it's coming from a 31 00:02:03,840 --> 00:02:08,850 different server so we can add another label no press spaces when you move the cursor along, because 32 00:02:08,850 --> 00:02:11,970 why HTML files don't like tabs in experience. 33 00:02:11,970 --> 00:02:12,720 So host. 34 00:02:12,870 --> 00:02:16,620 I'm going to call my label host and I'm going to name it my skill. 35 00:02:16,650 --> 00:02:21,060 That's just the name of my hosts that I've written control to save that. 36 00:02:21,210 --> 00:02:22,680 Yes, that's very good. 37 00:02:22,960 --> 00:02:25,220 OK, I'm now going to configure it as a service. 38 00:02:25,230 --> 00:02:28,260 I'm going to add the user prompt Hale to run that process. 39 00:02:28,770 --> 00:02:31,890 OK, system pronto ID a chrome tail. 40 00:02:31,890 --> 00:02:32,700 I can check it. 41 00:02:32,910 --> 00:02:33,270 I go. 42 00:02:33,390 --> 00:02:35,040 It's in the prompt mail group. 43 00:02:35,500 --> 00:02:39,450 A call prompts service in the ATC system. 44 00:02:39,450 --> 00:02:40,760 The system voter. 45 00:02:40,980 --> 00:02:42,240 Hey, I'll add this script. 46 00:02:42,990 --> 00:02:49,320 Hey, it's going to run that pronto tail and that configuration file usr local bin config pronto Troll 47 00:02:49,320 --> 00:02:49,850 X. 48 00:02:49,860 --> 00:02:53,070 Yes, we can now start the prompt mail service. 49 00:02:53,850 --> 00:02:59,370 Note that we will have some errors that we will resolve, and I'll just check the status just to see 50 00:02:59,370 --> 00:03:00,780 what it's saying right now. 51 00:03:00,780 --> 00:03:02,310 So it's active running, that's good. 52 00:03:02,310 --> 00:03:04,830 But we can see generally two errors here. 53 00:03:04,830 --> 00:03:07,160 It cannot read the log files. 54 00:03:07,170 --> 00:03:09,990 Permission denied it also error sending batch. 55 00:03:10,680 --> 00:03:13,950 It basically cannot send to Port 3.1 Internet Server. 56 00:03:14,130 --> 00:03:19,950 That's because I've set up the IP tables, rules and blocked Port 3.1 for external requests, so we'll 57 00:03:19,950 --> 00:03:26,700 fix up the IP tables rules on Mega-fauna server first to allow this MySchool server to push to three 58 00:03:27,240 --> 00:03:30,780 so control C to get out of the status of dagalo into Mega-fauna server. 59 00:03:31,850 --> 00:03:34,950 OK, so one microphone, a seven hour router, Cafaro dot com. 60 00:03:34,970 --> 00:03:38,630 I'm not going to verify my IP table's rules or IP tables. 61 00:03:39,000 --> 00:03:42,860 OK, so these are my rules for Port 3100 here, these two here. 62 00:03:42,860 --> 00:03:47,250 So I'm accepting local hosts three 100, but dropping everything else through 100. 63 00:03:47,270 --> 00:03:54,350 I'm going to insert a new rule here at Line three, one to three that will allow my MySchool server 64 00:03:54,350 --> 00:03:55,010 to connect. 65 00:03:55,250 --> 00:04:04,610 OK, so back on the prompter service page, scrolling down this line here by just clear paste the IP 66 00:04:04,610 --> 00:04:05,630 address to allow. 67 00:04:05,660 --> 00:04:09,820 So is there meaning source the source IP will be mom. 68 00:04:09,830 --> 00:04:14,180 Ask your server, which is that IP address their your IP address will be different. 69 00:04:14,180 --> 00:04:16,769 Destination ports three 100 exit. 70 00:04:16,790 --> 00:04:19,279 And here I'm putting it into position. 71 00:04:19,279 --> 00:04:19,750 Three. 72 00:04:19,760 --> 00:04:26,500 So enter now IP tables l again and we have a new rule here accepting the IP address. 73 00:04:26,510 --> 00:04:28,700 Three hundred still accepting local hosts. 74 00:04:28,700 --> 00:04:31,430 Three hundred and dropping everything else through 100. 75 00:04:31,580 --> 00:04:33,630 OK, so going back onto my mosque, your server? 76 00:04:34,130 --> 00:04:37,280 If I did the status again, sudo service prompt our status. 77 00:04:37,400 --> 00:04:43,340 We shouldn't be saying that era anymore, and I can't actually say in that last few lines of log there. 78 00:04:43,340 --> 00:04:48,220 But but anyway, next problem is to solve the permission denied for the full names. 79 00:04:48,320 --> 00:04:48,680 OK. 80 00:04:49,130 --> 00:04:54,500 So if we slide into the VAR log folder there, I'm just highlighting that. 81 00:04:54,500 --> 00:04:56,450 And then if I right click it copies it down. 82 00:04:56,600 --> 00:04:58,790 It's one less LRH. 83 00:04:58,940 --> 00:05:02,420 All the log files that I want to read are IBM Group. 84 00:05:02,570 --> 00:05:05,090 So let's add our prompt L user to the idea of group. 85 00:05:05,150 --> 00:05:07,430 OK, that was on the prompter page. 86 00:05:09,270 --> 00:05:12,390 Use a mod add to the Group ID. Pronto. 87 00:05:12,480 --> 00:05:14,490 Now we do it from tail. 88 00:05:14,580 --> 00:05:18,060 We can see that the promptly user is in the IDM group as well. 89 00:05:18,090 --> 00:05:18,510 Excellent. 90 00:05:18,540 --> 00:05:23,260 It should now be able to read us look fall, so it's still a status again on prom tail running on my 91 00:05:23,280 --> 00:05:24,850 skill machine status. 92 00:05:24,870 --> 00:05:26,760 I just move along sideways. 93 00:05:26,840 --> 00:05:28,290 OK, I need to restart. 94 00:05:28,320 --> 00:05:32,540 Sudo service from tail restart. 95 00:05:32,550 --> 00:05:33,860 OK, set us again. 96 00:05:33,870 --> 00:05:36,630 OK, not seeing any errors control c. 97 00:05:36,630 --> 00:05:38,430 Let's try this again. 98 00:05:38,460 --> 00:05:43,170 OK, we now got seeked happening, so the log files are now being read. 99 00:05:43,410 --> 00:05:47,310 OK, so that's what we now have a prompt health service running on my mask. 100 00:05:47,310 --> 00:05:51,150 Your server pushing data to the wiki service, running a microphone, a server that means we should 101 00:05:51,150 --> 00:05:53,040 now be able to go in Agraféna and see it. 102 00:05:53,220 --> 00:05:56,190 OK, so open Gravano Explore Tab Log Browser. 103 00:05:56,190 --> 00:06:01,830 We've got a new entry here for host, so let's just dissect those and look at host Bing MySchool. 104 00:06:01,840 --> 00:06:05,790 We can click that and we can show logs and these are all the logs from a mosque. 105 00:06:05,790 --> 00:06:08,910 Your server now going back to log browser here. 106 00:06:08,940 --> 00:06:17,160 Now, if I look at job and press bollocks show logs, we're going to see some which come from microphone, 107 00:06:17,160 --> 00:06:21,330 a server and some which come from my mosque, who also says a third label. 108 00:06:21,330 --> 00:06:22,550 Their host was cool. 109 00:06:22,560 --> 00:06:28,410 I'm going to add a label to microphone a server as well so that we can query one or the other more effectively 110 00:06:28,410 --> 00:06:29,570 or both at the same time. 111 00:06:29,580 --> 00:06:31,290 So I'm a microphone, a server. 112 00:06:31,380 --> 00:06:35,220 I'm going to edit my prompter config player on CD. 113 00:06:35,550 --> 00:06:38,790 Use local bin Ellis. 114 00:06:39,240 --> 00:06:43,320 It's my prompter config sudo nano config. 115 00:06:43,320 --> 00:06:52,010 While I am out and down here in the labels all that a new label, six spaces, most coal and Safana. 116 00:06:52,140 --> 00:06:54,910 OK, so control x yes. 117 00:06:54,960 --> 00:06:56,070 Three Start from tail. 118 00:06:57,530 --> 00:06:59,810 OK, we can double check its status. 119 00:07:01,100 --> 00:07:01,670 Very good. 120 00:07:01,790 --> 00:07:02,940 I don't see any errors. 121 00:07:03,920 --> 00:07:11,600 OK, going back into the low browser, explore low key web browser based, I now have to host Safana 122 00:07:11,600 --> 00:07:20,690 in my school so I can search for VAR logs on my school, see host my school logs or VAR logs on Hosaka 123 00:07:20,690 --> 00:07:27,590 Pharma or VAR logs for both servers at the same time to show logs, they've got Kephart on my Kirk or 124 00:07:28,190 --> 00:07:29,180 from my school. 125 00:07:29,330 --> 00:07:36,410 Same time, I can say just give me the host my school by pressing that cluster that has updated the 126 00:07:36,650 --> 00:07:37,400 stream selector. 127 00:07:37,430 --> 00:07:43,220 Now, going back to one of the more complicated queries from the last video going down to the aggregate 128 00:07:43,370 --> 00:07:48,120 groups section down here, we can now group by host. 129 00:07:48,140 --> 00:07:49,160 So copy that. 130 00:07:50,510 --> 00:07:58,430 And put that in there, so some can't over time job VAR logs by host press shift and so OK, so I have 131 00:07:58,430 --> 00:07:59,120 two counts. 132 00:07:59,120 --> 00:08:04,780 There will actually have three counts there because our original ones were actually tagged as Gravano. 133 00:08:04,790 --> 00:08:11,330 But if I just view those two there that we can see that we're now getting two lines, this green one 134 00:08:11,330 --> 00:08:12,980 will eventually just disappear. 135 00:08:12,980 --> 00:08:15,170 So I would just say to five minutes. 136 00:08:15,320 --> 00:08:17,180 OK, well, the colors changed this now. 137 00:08:17,180 --> 00:08:18,380 California and Moscow. 138 00:08:18,530 --> 00:08:18,900 Excellent. 139 00:08:18,920 --> 00:08:20,390 OK, so I'm happy that that's working. 140 00:08:20,390 --> 00:08:24,900 I can get data from property on my Moscow server and view it in Cabana. 141 00:08:24,920 --> 00:08:30,920 But what's going on here is promptly sending that data unencrypted across the internet to my grandfather's 142 00:08:30,920 --> 00:08:31,340 server. 143 00:08:31,400 --> 00:08:33,880 Log files normally contain very sensitive data. 144 00:08:33,890 --> 00:08:36,860 They can contain the things that people typing into a server. 145 00:08:36,890 --> 00:08:40,250 They can contain IP addresses, passwords, all kinds of things. 146 00:08:40,280 --> 00:08:44,390 So if you're running on a public network like I am, you need to make sure that information is encrypted 147 00:08:44,390 --> 00:08:45,080 as it's sent. 148 00:08:45,200 --> 00:08:49,820 So since I've already set up a domain name and SSL right at the beginning of the course and enabled 149 00:08:49,820 --> 00:08:55,670 that using the index reverse proxy, I'm going to set up low key service behind the next reverse proxy 150 00:08:55,670 --> 00:09:01,940 so that external prop tables can send data by that that will have the SSL certificate bound. 151 00:09:01,970 --> 00:09:04,940 So any traffic will be encrypted when it's being sent to Loki. 152 00:09:05,030 --> 00:09:10,790 Also note that I'm using this method because both of those are effectively independent servers on the 153 00:09:10,790 --> 00:09:11,300 internet. 154 00:09:11,480 --> 00:09:15,740 Normally, servers in a corporate environment will be on a virtual private network, so the data would 155 00:09:15,740 --> 00:09:17,720 be sent through a private network anyway. 156 00:09:17,720 --> 00:09:21,440 But because these are both on the internet and you might have the situation, I'm going to show you 157 00:09:21,440 --> 00:09:22,250 how I solve it. 158 00:09:22,310 --> 00:09:23,400 That's using interconnects. 159 00:09:23,530 --> 00:09:30,620 OK, so on the install second pontos service page, I'm going to edit my engine configuration on Mega-fauna 160 00:09:30,620 --> 00:09:31,010 server. 161 00:09:31,100 --> 00:09:35,410 Some of my cofounders server that wrote, Agraféna, I'm going to open up my ingenious configuration. 162 00:09:35,420 --> 00:09:40,150 So that was in the folder, said ATC and Genetics. 163 00:09:40,370 --> 00:09:42,070 So it's enabled. 164 00:09:42,260 --> 00:09:47,630 So else there's the default, which is the default web page for Engine X. And there's that one that 165 00:09:47,630 --> 00:09:48,180 I created. 166 00:09:48,200 --> 00:09:52,550 So sudo nano Profar, Nice B code dot net dot com. 167 00:09:53,060 --> 00:09:53,740 There it is. 168 00:09:53,750 --> 00:09:56,420 I'm going to add another location in there. 169 00:09:56,420 --> 00:10:00,950 So adding a line, a few spaces going to copy just this section here. 170 00:10:01,040 --> 00:10:02,150 Don't copy the full stop. 171 00:10:02,300 --> 00:10:05,300 I'm just indicating that this launch before and after so. 172 00:10:05,390 --> 00:10:08,140 Copy that and right click Press Enter. 173 00:10:08,150 --> 00:10:14,510 I'm creating a new location, which is the low key path, so I use titbits Karadzic's Dot Net Slash 174 00:10:14,510 --> 00:10:22,130 Loki, and that I will allow my MySchool server, whose IP address was hosting that they're denying 175 00:10:22,130 --> 00:10:23,030 everything else. 176 00:10:23,060 --> 00:10:29,870 I'm a proxy pass to internal local hosts 3100, so I'm using existing SSL certificates that were managed 177 00:10:29,870 --> 00:10:30,350 by Cert. 178 00:10:30,650 --> 00:10:36,320 So any request to Mega-fauna server while Loki from that IP address will be encrypted. 179 00:10:36,470 --> 00:10:37,760 Everything else will be denied. 180 00:10:37,880 --> 00:10:43,490 It'll be passed internally to the Loki servers running on local hosts through a Control X to save. 181 00:10:43,520 --> 00:10:44,060 Yes. 182 00:10:44,310 --> 00:10:48,390 And OK, we can check that the next configuration is OK. 183 00:10:48,410 --> 00:10:53,480 So Engine X Half A. And it says syntax is OK and test is successful. 184 00:10:53,480 --> 00:10:53,990 Very good. 185 00:10:53,990 --> 00:10:55,190 Its restart Engine X. 186 00:10:56,340 --> 00:11:00,410 And genetics very start chicken studies. 187 00:11:01,450 --> 00:11:03,970 And that's all good active crime control. 188 00:11:04,010 --> 00:11:10,010 See now going back onto my most crossover on my mice crossover, now I'm going to get back into my pronto 189 00:11:10,010 --> 00:11:14,780 config C.D. use local in Dallas. 190 00:11:14,840 --> 00:11:16,970 There it is, Sudan and I. 191 00:11:18,160 --> 00:11:19,340 Config pronto. 192 00:11:19,360 --> 00:11:20,020 Why, ammo? 193 00:11:21,060 --> 00:11:24,180 I've no longer to use that ATP 3100. 194 00:11:24,210 --> 00:11:31,740 I'm going to now push to hasty TPS refiner SB code dot net slash Loki, that was the path that I created 195 00:11:31,860 --> 00:11:35,820 and then use everything else, which is the same Loki API version one push. 196 00:11:36,270 --> 00:11:40,560 So espectador net slash Loki is the endpoint that I credit Loki API version. 197 00:11:40,560 --> 00:11:47,910 When push is the remaining part of the URL that Loki in point expects control x yes. 198 00:11:48,030 --> 00:11:49,200 Restart from tail. 199 00:11:50,820 --> 00:11:51,360 All right, good. 200 00:11:51,570 --> 00:11:52,620 Or take a status. 201 00:11:54,160 --> 00:11:58,310 OK, now I don't see any connection errors for that new euro. 202 00:11:58,330 --> 00:11:59,140 It's very, very good. 203 00:11:59,170 --> 00:12:07,210 If you want to test that, you can access that from your module so they can use curl and type in HTP 204 00:12:07,210 --> 00:12:10,180 es colon slash slash on a. 205 00:12:11,290 --> 00:12:15,110 It's less low-key, for example, and it's returned a three to one redirect. 206 00:12:15,130 --> 00:12:15,690 That's right. 207 00:12:15,700 --> 00:12:20,410 Now also, I've only enabled that for my wife's cable server. 208 00:12:20,440 --> 00:12:26,020 So if I just copy that and try to access that URL from the server where I'm making this video, I used 209 00:12:26,020 --> 00:12:29,320 to be a sacrifice code dot net Rs for three forbidden. 210 00:12:29,320 --> 00:12:32,620 So the only server that can access that is my Moscow set. 211 00:12:32,800 --> 00:12:33,280 Excellent. 212 00:12:33,370 --> 00:12:40,540 So I no longer need that Ro Port 3100 for my Moscow also, because I'm now going by the index reverse 213 00:12:40,540 --> 00:12:43,060 proxy, which is enforcing ISO. 214 00:12:43,090 --> 00:12:44,880 So I'm going to delete that input. 215 00:12:44,900 --> 00:12:45,580 I had it before. 216 00:12:45,580 --> 00:12:52,360 So becoming a fan of server clear IP tables often l line numbers. 217 00:12:52,570 --> 00:12:59,080 It's shown me that if I just scroll up, the input three is that specific rule that I've added, I'm 218 00:12:59,080 --> 00:13:00,010 going to delete that rule. 219 00:13:00,010 --> 00:13:03,100 So I play tables, delete input three. 220 00:13:03,130 --> 00:13:09,280 Now let's raid that IP tables list again, and it's no longer there on the two rules for three 100 local 221 00:13:09,280 --> 00:13:09,740 hosts. 222 00:13:09,760 --> 00:13:15,370 And anyway, OK, so security of your data is a consideration when running services across different 223 00:13:15,370 --> 00:13:17,690 servers that are managing log files. 224 00:13:17,710 --> 00:13:23,950 If you were using us or similar, you would be setting up security groups to allow and deny access and 225 00:13:23,950 --> 00:13:27,250 may also be setting up encryption on those channels as well. 226 00:13:27,280 --> 00:13:31,960 I'm asking you to share my service, which are just unrestricted Ubuntu's on the internet, and I've 227 00:13:31,960 --> 00:13:32,950 used digital data for that. 228 00:13:33,160 --> 00:13:37,840 Digitization also has VPC configuration options, which you can manage. 229 00:13:37,900 --> 00:13:43,600 OK, so looking at the networking tab on digital ocean for my particular servers VPC. 230 00:13:44,730 --> 00:13:52,230 I have three servers here, my Amsterdam section, all on the same subnet here, so I could have actually 231 00:13:52,230 --> 00:13:57,520 just connected using those internal pipes between my MySchool and Raphinha's servers if I wanted to. 232 00:13:57,540 --> 00:14:02,790 But publishing, if you didn't have that option, then you'd have to be making sure that all your messages 233 00:14:02,790 --> 00:14:07,140 as I travelled across a public network were encrypted and access is controlled. 234 00:14:07,290 --> 00:14:08,250 OK, excellent. 235 00:14:08,280 --> 00:14:15,750 And also, since I have prompter running on my Moscow server now, I should block access to Port nine 236 00:14:15,750 --> 00:14:19,630 zero eight zero from external requests just before I do that. 237 00:14:19,650 --> 00:14:23,800 One thing I haven't showed yet about Toronto is that it has its own web user interface. 238 00:14:23,820 --> 00:14:32,330 So if I go to my Moscow server IP, which is that hole in 98, we have a prompt tell user interface. 239 00:14:32,340 --> 00:14:37,230 Now it's showing a lot of information or statistics there that you can look at and view, and that's 240 00:14:37,230 --> 00:14:38,610 the configuration. 241 00:14:38,610 --> 00:14:44,220 We only created that small section, really nice configuration, but there are a lot of defaults that 242 00:14:44,310 --> 00:14:46,790 prompter will use and you can manage all of those. 243 00:14:46,830 --> 00:14:51,090 But as you can see, that's exposed on the internet, and I don't really want that. 244 00:14:51,090 --> 00:14:52,900 So I'm going to block 98. 245 00:14:53,160 --> 00:14:58,970 So if I copy that whole section there, I'm going set local host 980 and block everything else. 246 00:14:58,980 --> 00:15:01,320 I'm on my Moscow server where I've install one. 247 00:15:01,320 --> 00:15:03,360 You prob tail this presenter. 248 00:15:03,720 --> 00:15:05,630 I now have new rules for 98. 249 00:15:05,940 --> 00:15:07,920 They're accepting local host 980. 250 00:15:07,930 --> 00:15:09,990 That's OK, but dropping everything else. 251 00:15:10,080 --> 00:15:13,440 So that now means if I refresh that, that's just going to timeout. 252 00:15:13,560 --> 00:15:16,380 That will take about 30 seconds to start in your browser. 253 00:15:16,480 --> 00:15:19,260 That it was time out doesn't work anymore. 254 00:15:20,290 --> 00:15:21,490 OK, so timed out. 255 00:15:22,770 --> 00:15:23,340 And that one. 256 00:15:23,800 --> 00:15:24,690 OK, so torn down. 257 00:15:25,230 --> 00:15:25,650 Excellent. 258 00:15:25,940 --> 00:15:27,600 That takes about 30 seconds to time out. 259 00:15:27,910 --> 00:15:29,450 I get about time, right? 260 00:15:29,490 --> 00:15:29,830 OK? 261 00:15:29,850 --> 00:15:35,910 And since I also explicitly used my GOP support as 1997, I'm going to allow blog post as well. 262 00:15:36,000 --> 00:15:37,680 OK, so I copied the first line. 263 00:15:39,030 --> 00:15:45,120 OK, GOP say, will sometimes call itself by its external IP address, so you might need to enable this 264 00:15:45,120 --> 00:15:45,360 one. 265 00:15:45,900 --> 00:15:50,070 OK, I'm going to allow local host to drop everything else. 266 00:15:50,970 --> 00:15:51,940 And listed again. 267 00:15:51,960 --> 00:15:56,250 OK, so I have some rules for 1997, so my first one. 268 00:15:56,400 --> 00:15:59,280 It has replaced my IP address of my host name. 269 00:15:59,310 --> 00:16:00,350 So that's OK. 270 00:16:00,360 --> 00:16:06,060 If you're having problems connecting to prompt tail or low key internally on your own networks, it 271 00:16:06,060 --> 00:16:11,100 may be useful to do what I did, Steve, where I added a rule using my external IP and replaced it with 272 00:16:11,100 --> 00:16:11,820 the hostname. 273 00:16:11,820 --> 00:16:14,730 Anyway, Loki and tail are quite complicated to set up. 274 00:16:14,740 --> 00:16:20,070 I've done it many times now, so anyway, let's go back into Carafano and verify that everything still 275 00:16:20,070 --> 00:16:20,640 works. 276 00:16:20,880 --> 00:16:24,830 Loki low browser app hosts Profondeur was cool. 277 00:16:24,840 --> 00:16:29,430 I was queried by VAR Log and I should get everything show logs for the last five minutes and then we 278 00:16:29,430 --> 00:16:32,670 go to a mosque, often on my school. 279 00:16:33,450 --> 00:16:33,870 Excellent. 280 00:16:33,930 --> 00:16:39,060 The next video will create a dashboard that starts using this data, and we'll add some complex functionality 281 00:16:39,060 --> 00:16:44,250 to that called annotation queries and how we can link the logs and the graph panels together. 282 00:16:44,310 --> 00:16:44,790 Excellent.