OK, so now to install an advanced elasticsearch dashboard that uses both Volbeat and Metrick beat data
sources at the same time.
I'm going to download it from the Carfagna Dashboard's website.
It's called OS Stats Linux.
That's the ID just there that I'll need now.
It's got a lot of information in there, logs, network stats, et cetera, et cetera.
And all of this information comes from the metric based in the Volbeat, which I'll have installed on
the same server.
So two listeners ago I installed Falbe on my Espie code server.
I'm also going to install metric based on that server, which is a Debian based Ubuntu twenty point
zero four K.
So on the download metric Beke page, we can use at one end Deb's 64 bit copy that link.
And then on the server url l o output your URL that I just copied downloads beats metric metric seventeen
and a sixty four.
So I've already provided that link there myself.
Now to on the package manager Souto package manager Metrick beat seven 10 instore.
Let's have a look.
Case not running good, I do have Forbert beat running on this server already.
He's already running.
OK, so let's go into the metric before.
It's now Hitesh, and we need to edit the metric Betawi amount first, we'll have a look what's enabled
by default.
So metric on Jules.
List, OK?
So there's a whole lot of models to choose from, a naval system by default, just like a windows,
OK, so pseudo metric, B Y amount.
It looks like all the others.
Using Kobana.
My address is a small myelocytic search IP address, Cohon nine 200 and my S.B code server is already
allowed to send report nine 200 pay.
I'm going to keep those to this time is to see what happens.
Very good tricks to save, yes, now.
It started.
A trick start and chicken status or good.
Let's go on to the ElasticSearch server on the elasticsearch server and let's look at the indexes.
OK, so it should be using the existing metric bait index that was created in the last video.
Now in California, let's look at the ElasticSearch metric, Bayt DataSource and I can see Hesp code
lines already.
So I'm getting metric based data from my desktop, which is Windows plus my Hesp code server, which
is Linux on the Net as well, though almost on it.
And that's showing me a code.
Excellent.
So it's now time to install that new dashboard because it appears that I'm getting lots of data now
on that ElasticSearch server and I can read it using the ElasticSearch data sourcing from dashboards
Manwich.
Let's import a dashboard that already being one to six to six load.
OK, so my elasticsearch metric beat was that one and my fall beat, which I hadn't renamed yet, is
just simply that it would have been better if I named ElasticSearch Volbeat.
Perhaps, but anyway, import.
OK, so Espie code server is already preselected so this dashboard is pretty good already log's.
Can see logs, logs.
Looks like it could be improved their network stats.
Let's look at that for the last five minutes.
Very good, but network statistics for errors drops.
These stats are data yet?
For the last 15 minutes, all system starts, OK?
Use a Stetz route.
Very good use of memory.
Process Stets.
Which processes are running the most on my Linux server memory stets?
CPU's, Stets.
So all of you may speak to restructure.
Lots of information there.
So straight away that dashboard is worth keeping last five minutes.
And if I set up metric beaten Falbe, I know my Linux servers that will shoven that now this won't work
so well on a Windows server because the Windows Server is not producing logs in the same way.
So this logs PENNEL won't work for you.
At least.
Process, that's.
Since my windows already has Metrick be running as well, and I've pointed this to the same metric by
datasource that the Windows was already using, I can make the Windows Server appear in this list by
just modifying the dashboard settings here.
Variables, and it says here find terms subfield hostname size, query hostname.
Just get rid of this whole query section because it's saying and not host.
I was family windows so can I get rid of that query.
They're completely.
And just keep that down here, it shows me the Windows host, plus the last update that out down here
is the Windows host.
Well, we don't have everything.
Still very useful.
That's quite a perceived dashboard that so let's look at the logs for windows.
We don't get anything there.
And SB Code, which is a Linux server.
Twenty four.
If we look at this again, there's some information missing, we to discuss stats here.
Is the one that stands out the most, ESCs, that's Disko, right?
Like that, if we look at the graph on a website where I downloaded the dashboard information, it says
down here which metrics it's to have enabled.
So open up Wincer C.p, which is what I use for navigating the file system on Linux.
And I'm in the ATC metric big folder there.
The new one on my because it's going to module and I just scroll down and I find a system there will
email, I can open that up in various code.
That's what I use.
And I can see that compared to the collective configuration dittos CPU load memory network process,
I don't have disk IO enabled or service or users even though I'm seeing information about users already.
So let's have a look how that everything else looks good and also how they got the CPU by 10.
So I Sepo 10.
What memory.
Ten top 10.
That's how you do it anyway.
So I think that that has now updated the fall on my remote server.
I use when I sleep that clock back on I my code server, I need to restart the metric by process.
Very good, go back into the dashboard and hopefully we start seeing some Desco stats that 10 to 10
seconds.
The last five minutes.
OK, and now I have started see this stets, it took a little while, you actually took a few minutes
or started happening, but there now seems to be a lot of information.
There would.
All systems, that is the stats, which was all good already.
So I'm very impressed with that excellent.