git clone https://github.com/deviantony/docker-elk
We disable the paid features by editing the file elasticsearch.yml that you can find in the directory “docker-elk/elasticsearch/config”.
We need to change the value of the “xpack.license.self_generated.type” key from “trial” to “basic”.
--- ## Default Elasticsearch configuration from Elasticsearch base image. ## https://github.com/elastic/elasticsearch/blob/master/distribution/docker/src/docker/config/elasticsearch.yml # cluster.name: "docker-cluster" network.host: 0.0.0.0 ## X-Pack settings ## see https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-xpack.html # xpack.license.self_generated.type: basic xpack.security.enabled: true xpack.monitoring.collection.enabled: true
We enter then the docker-elk directory and we can start the project through Docker Compose.
cd /docker-elk docker-compose up -d
Once finished you will be able to view the containers created on the Docker Desktop dashboard.
Now your brand new ELK stack it’s ready and you can login through default access:
URL: http://localhost:5601 Login: elastic Password: changeme
You can then start using Kibana and the ELK stack.
If you need to uninstall ELK stack just use the following command for Docker Compose.
docker-compose down -v
In a future post we will continue by adding Filebeat running on Docker as well.