![\"\"](\"https:\/\/linux.atheesh.com\/wp-content\/uploads\/2024\/04\/elk-1024x600.png\")
The Elastic Stack has four main components:<\/p>\n\n\n\n
- \n
- Elasticsearch<\/strong><\/a>: a distributed RESTful<\/em><\/a> search engine which stores all of the collected data.<\/li>\n\n\n\n
- Logstash<\/strong><\/a>: the data processing component of the Elastic Stack which sends incoming data to Elasticsearch.<\/li>\n\n\n\n
- Kibana<\/strong><\/a>: a web interface for searching and visualizing logs.<\/li>\n\n\n\n
- Beats<\/strong><\/a>: lightweight, single-purpose data shippers that can send data from hundreds or thousands of machines to either Logstash or Elasticsearch.<\/li>\n<\/ul>\n\n\n\n
In this tutorial, you will install the Elastic Stack<\/a> on an Ubuntu 20.04 server. You will learn how to install all of the components of the Elastic Stack \u2014 including Filebeat<\/a>, a Beat used for forwarding and centralizing logs and files \u2014 and configure them to gather and visualize system logs. Additionally, because Kibana is normally only available on the
localhost<\/code>, we will use Nginx<\/a> to proxy it so it will be accessible over a web browser. We will install all of these components on a single server, which we will refer to as our Elastic Stack server<\/em>.<\/p>\n\n\nPrerequisites<\/h3>\n\n\n
To complete this tutorial, you will need the following:<\/p>\n\n\n\n
- \n
- An Ubuntu 20.04 server with 4GB RAM and 2 CPUs set up with a non-root sudo user. You can achieve this by following the Initial Server Setup with Ubuntu 20.04.For this tutorial, we will work with the minimum amount of CPU and RAM required to run Elasticsearch. Note that the amount of CPU, RAM, and storage that your Elasticsearch server will require depends on the volume of logs that you expect.<\/li>\n\n\n\n
- OpenJDK 11 installed<\/li>\n\n\n\n
- Nginx installed on your server, which we will configure later in this guide as a reverse proxy for Kibana. Follow our guide on How to Install Nginx on Ubuntu 20.04 to set this up.<\/li>\n<\/ul>\n\n\n
Installing and Configuring Elasticsearch<\/h2>\n\n
Update Package Index<\/strong>:<\/h3>\n\n\n
Before installing Elasticsearch, update the package index on your Ubuntu system by running:<\/p>\n\n\n\n
- Logstash<\/strong><\/a>: the data processing component of the Elastic Stack which sends incoming data to Elasticsearch.<\/li>\n\n\n\n