OK, so now we're going to install a second prompt health service, so we'll have to prompt health running
and we'll be able to query those in Karana.
OK, so we have the lucky data source, we have the lucky service and we have the prompt health service
all running on our Bafana's server.
So in this one, I'm going to install a prompt health service on my MySchool server that we set up in
this section and that will be pushing data to the Lokey service on the performance server.
And this is to demonstrate that you can have as many prompt health services running wherever you want
or pushing to the same lucky service and being able to query those in Griffon.
But because they'll be running on different servers, there are quite a few considerations.
So we'll start off by installing the prompt tale binary on the mosque, your server.
I'm going to use pretty much the same process as was demonstrated in the install prompt binary installed
as a service section.
So I'm logging on to my my SQL server.
OK, I'm going to install the same version.
So City use a local bin.
I'm going to install the same version that was two point four point one.
The pronto Linux i amd64 going to unzip it in, flighting it should already have permissions.
I can check that Ellis LRH and prompted Linux AMD64 already has execute permissions now to create a
config screen in a config pronto or HTML.
Or paste this in now remembering I'm actually changing my GOP support.
You don't have to do this to 1997.
This is so I can explicitly block that port later on.
Using zero will assign a dynamic port.
The client bureau will be my Safana server, so it's not pushing to a local wiki.
Service is pushing to a like a server spreading across a network, and I set up my to my name Gryphon
ISP Code Dot Net to point to the IP address of microphone server.
It was sent to Port 3100 Loki API version one push.
The scribe config is the same will be targeting local hosts.
We have a job called VAR logs and we're reading all the files in the path VAR log style log.
Now, when the star was pushed to the Loki service, there is no indication that it's coming from a
different server so we can add another label no press spaces when you move the cursor along, because
why HTML files don't like tabs in experience.
So host.
I'm going to call my label host and I'm going to name it my skill.
That's just the name of my hosts that I've written control to save that.
Yes, that's very good.
OK, I'm now going to configure it as a service.
I'm going to add the user prompt Hale to run that process.
OK, system pronto ID a chrome tail.
I can check it.
I go.
It's in the prompt mail group.
A call prompts service in the ATC system.
The system voter.
Hey, I'll add this script.
Hey, it's going to run that pronto tail and that configuration file usr local bin config pronto Troll
X.
Yes, we can now start the prompt mail service.
Note that we will have some errors that we will resolve, and I'll just check the status just to see
what it's saying right now.
So it's active running, that's good.
But we can see generally two errors here.
It cannot read the log files.
Permission denied it also error sending batch.
It basically cannot send to Port 3.1 Internet Server.
That's because I've set up the IP tables, rules and blocked Port 3.1 for external requests, so we'll
fix up the IP tables rules on Mega-fauna server first to allow this MySchool server to push to three
so control C to get out of the status of dagalo into Mega-fauna server.
OK, so one microphone, a seven hour router, Cafaro dot com.
I'm not going to verify my IP table's rules or IP tables.
OK, so these are my rules for Port 3100 here, these two here.
So I'm accepting local hosts three 100, but dropping everything else through 100.
I'm going to insert a new rule here at Line three, one to three that will allow my MySchool server
to connect.
OK, so back on the prompter service page, scrolling down this line here by just clear paste the IP
address to allow.
So is there meaning source the source IP will be mom.
Ask your server, which is that IP address their your IP address will be different.
Destination ports three 100 exit.
And here I'm putting it into position.
Three.
So enter now IP tables l again and we have a new rule here accepting the IP address.
Three hundred still accepting local hosts.
Three hundred and dropping everything else through 100.
OK, so going back onto my mosque, your server?
If I did the status again, sudo service prompt our status.
We shouldn't be saying that era anymore, and I can't actually say in that last few lines of log there.
But but anyway, next problem is to solve the permission denied for the full names.
OK.
So if we slide into the VAR log folder there, I'm just highlighting that.
And then if I right click it copies it down.
It's one less LRH.
All the log files that I want to read are IBM Group.
So let's add our prompt L user to the idea of group.
OK, that was on the prompter page.
Use a mod add to the Group ID. Pronto.
Now we do it from tail.
We can see that the promptly user is in the IDM group as well.
Excellent.
It should now be able to read us look fall, so it's still a status again on prom tail running on my
skill machine status.
I just move along sideways.
OK, I need to restart.
Sudo service from tail restart.
OK, set us again.
OK, not seeing any errors control c.
Let's try this again.
OK, we now got seeked happening, so the log files are now being read.
OK, so that's what we now have a prompt health service running on my mask.
Your server pushing data to the wiki service, running a microphone, a server that means we should
now be able to go in Agraféna and see it.
OK, so open Gravano Explore Tab Log Browser.
We've got a new entry here for host, so let's just dissect those and look at host Bing MySchool.
We can click that and we can show logs and these are all the logs from a mosque.
Your server now going back to log browser here.
Now, if I look at job and press bollocks show logs, we're going to see some which come from microphone,
a server and some which come from my mosque, who also says a third label.
Their host was cool.
I'm going to add a label to microphone a server as well so that we can query one or the other more effectively
or both at the same time.
So I'm a microphone, a server.
I'm going to edit my prompter config player on CD.
Use local bin Ellis.
It's my prompter config sudo nano config.
While I am out and down here in the labels all that a new label, six spaces, most coal and Safana.
OK, so control x yes.
Three Start from tail.
OK, we can double check its status.
Very good.
I don't see any errors.
OK, going back into the low browser, explore low key web browser based, I now have to host Safana
in my school so I can search for VAR logs on my school, see host my school logs or VAR logs on Hosaka
Pharma or VAR logs for both servers at the same time to show logs, they've got Kephart on my Kirk or
from my school.
Same time, I can say just give me the host my school by pressing that cluster that has updated the
stream selector.
Now, going back to one of the more complicated queries from the last video going down to the aggregate
groups section down here, we can now group by host.
So copy that.
And put that in there, so some can't over time job VAR logs by host press shift and so OK, so I have
two counts.
There will actually have three counts there because our original ones were actually tagged as Gravano.
But if I just view those two there that we can see that we're now getting two lines, this green one
will eventually just disappear.
So I would just say to five minutes.
OK, well, the colors changed this now.
California and Moscow.
Excellent.
OK, so I'm happy that that's working.
I can get data from property on my Moscow server and view it in Cabana.
But what's going on here is promptly sending that data unencrypted across the internet to my grandfather's
server.
Log files normally contain very sensitive data.
They can contain the things that people typing into a server.
They can contain IP addresses, passwords, all kinds of things.
So if you're running on a public network like I am, you need to make sure that information is encrypted
as it's sent.
So since I've already set up a domain name and SSL right at the beginning of the course and enabled
that using the index reverse proxy, I'm going to set up low key service behind the next reverse proxy
so that external prop tables can send data by that that will have the SSL certificate bound.
So any traffic will be encrypted when it's being sent to Loki.
Also note that I'm using this method because both of those are effectively independent servers on the
internet.
Normally, servers in a corporate environment will be on a virtual private network, so the data would
be sent through a private network anyway.
But because these are both on the internet and you might have the situation, I'm going to show you
how I solve it.
That's using interconnects.
OK, so on the install second pontos service page, I'm going to edit my engine configuration on Mega-fauna
server.
Some of my cofounders server that wrote, Agraféna, I'm going to open up my ingenious configuration.
So that was in the folder, said ATC and Genetics.
So it's enabled.
So else there's the default, which is the default web page for Engine X. And there's that one that
I created.
So sudo nano Profar, Nice B code dot net dot com.
There it is.
I'm going to add another location in there.
So adding a line, a few spaces going to copy just this section here.
Don't copy the full stop.
I'm just indicating that this launch before and after so.
Copy that and right click Press Enter.
I'm creating a new location, which is the low key path, so I use titbits Karadzic's Dot Net Slash
Loki, and that I will allow my MySchool server, whose IP address was hosting that they're denying
everything else.
I'm a proxy pass to internal local hosts 3100, so I'm using existing SSL certificates that were managed
by Cert.
So any request to Mega-fauna server while Loki from that IP address will be encrypted.
Everything else will be denied.
It'll be passed internally to the Loki servers running on local hosts through a Control X to save.
Yes.
And OK, we can check that the next configuration is OK.
So Engine X Half A. And it says syntax is OK and test is successful.
Very good.
Its restart Engine X.
And genetics very start chicken studies.
And that's all good active crime control.
See now going back onto my most crossover on my mice crossover, now I'm going to get back into my pronto
config C.D. use local in Dallas.
There it is, Sudan and I.
Config pronto.
Why, ammo?
I've no longer to use that ATP 3100.
I'm going to now push to hasty TPS refiner SB code dot net slash Loki, that was the path that I created
and then use everything else, which is the same Loki API version one push.
So espectador net slash Loki is the endpoint that I credit Loki API version.
When push is the remaining part of the URL that Loki in point expects control x yes.
Restart from tail.
All right, good.
Or take a status.
OK, now I don't see any connection errors for that new euro.
It's very, very good.
If you want to test that, you can access that from your module so they can use curl and type in HTP
es colon slash slash on a.
It's less low-key, for example, and it's returned a three to one redirect.
That's right.
Now also, I've only enabled that for my wife's cable server.
So if I just copy that and try to access that URL from the server where I'm making this video, I used
to be a sacrifice code dot net Rs for three forbidden.
So the only server that can access that is my Moscow set.
Excellent.
So I no longer need that Ro Port 3100 for my Moscow also, because I'm now going by the index reverse
proxy, which is enforcing ISO.
So I'm going to delete that input.
I had it before.
So becoming a fan of server clear IP tables often l line numbers.
It's shown me that if I just scroll up, the input three is that specific rule that I've added, I'm
going to delete that rule.
So I play tables, delete input three.
Now let's raid that IP tables list again, and it's no longer there on the two rules for three 100 local
hosts.
And anyway, OK, so security of your data is a consideration when running services across different
servers that are managing log files.
If you were using us or similar, you would be setting up security groups to allow and deny access and
may also be setting up encryption on those channels as well.
I'm asking you to share my service, which are just unrestricted Ubuntu's on the internet, and I've
used digital data for that.
Digitization also has VPC configuration options, which you can manage.
OK, so looking at the networking tab on digital ocean for my particular servers VPC.
I have three servers here, my Amsterdam section, all on the same subnet here, so I could have actually
just connected using those internal pipes between my MySchool and Raphinha's servers if I wanted to.
But publishing, if you didn't have that option, then you'd have to be making sure that all your messages
as I travelled across a public network were encrypted and access is controlled.
OK, excellent.
And also, since I have prompter running on my Moscow server now, I should block access to Port nine
zero eight zero from external requests just before I do that.
One thing I haven't showed yet about Toronto is that it has its own web user interface.
So if I go to my Moscow server IP, which is that hole in 98, we have a prompt tell user interface.
Now it's showing a lot of information or statistics there that you can look at and view, and that's
the configuration.
We only created that small section, really nice configuration, but there are a lot of defaults that
prompter will use and you can manage all of those.
But as you can see, that's exposed on the internet, and I don't really want that.
So I'm going to block 98.
So if I copy that whole section there, I'm going set local host 980 and block everything else.
I'm on my Moscow server where I've install one.
You prob tail this presenter.
I now have new rules for 98.
They're accepting local host 980.
That's OK, but dropping everything else.
So that now means if I refresh that, that's just going to timeout.
That will take about 30 seconds to start in your browser.
That it was time out doesn't work anymore.
OK, so timed out.
And that one.
OK, so torn down.
Excellent.
That takes about 30 seconds to time out.
I get about time, right?
OK?
And since I also explicitly used my GOP support as 1997, I'm going to allow blog post as well.
OK, so I copied the first line.
OK, GOP say, will sometimes call itself by its external IP address, so you might need to enable this
one.
OK, I'm going to allow local host to drop everything else.
And listed again.
OK, so I have some rules for 1997, so my first one.
It has replaced my IP address of my host name.
So that's OK.
If you're having problems connecting to prompt tail or low key internally on your own networks, it
may be useful to do what I did, Steve, where I added a rule using my external IP and replaced it with
the hostname.
Anyway, Loki and tail are quite complicated to set up.
I've done it many times now, so anyway, let's go back into Carafano and verify that everything still
works.
Loki low browser app hosts Profondeur was cool.
I was queried by VAR Log and I should get everything show logs for the last five minutes and then we
go to a mosque, often on my school.
Excellent.
The next video will create a dashboard that starts using this data, and we'll add some complex functionality
to that called annotation queries and how we can link the logs and the graph panels together.
Excellent.