alex-phillips / elk-stack-traefik

Working ELK Stack tuned for Traefik logs

ELK stack with Traefik

Deploy the ELK stack ready to consume json logs from Traefik

Working Example (with geolocated remote IPs via GeoIP fields)

##tl;dr :

$ docker network create -d overlay --attachable my_log_net

or:

$ docker network create --opt encrypted --driver overlay --attachable my_log_net

and then:

$ docker stack deploy --compose-file=docker-compose.yml elk

notes:

Logstash Image at Docker Hub

---

**Traefik:**

Docs about Traefik, here.

Example:

$ touch acme.json ; chmod 0600 acme.json

$ docker run -d -v /var/run/docker.sock:/var/run/docker.sock -v $PWD/traefik.toml:/traefik.toml -v $PWD/acme.json:/acme.json -p 80:80 -p 443:443 --network my_log_net --name traefik traefik --docker

(use --network my_log_net for your traefik backends)

then make a safe ssh tunnel to Kibana:

$ ssh -L 5601:localhost:5601 user@<swarm manager host>

open http://localhost:5601