Managing logs with ELK
ELK is a famous and powerful log tool. ELK stands for Elasticsearch, Logstash and Kibana. Preview: TIM%E6%88%AA%E5%9B%BE20180825091223 1889×828 95.4 KB Prerequisites: ``` [root@iZ259zncm66Z kibana-6.4.0-linux-x86_64]# java -version java version "1.8.0_25" Java(TM) SE Runtime Environment (build 1.8.0_25-b17) Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode) ``` Install ELK: download and unzip the following files. wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.4.0.tar.gz wget https://artifacts.elastic.co/downloads/logstash/logstash-6.4.0.tar.gz wget https://artifacts.elastic.co/downloads/kibana/kibana-6.4.0-linux-x86_64.tar.gz Configuration: • Run elasticsearch. cd path/to/elasticsearch bin/elasticsearch curl http://localhost:9200/ • Run Kibana cd path/to/kibana open config/kibana.yml and set elasticsearch.url to point at your Elasticsearch instance, set server.host to external ip bin/kibana curl http://localhost:5601 3.Run Logstash on each cosmos node. cd path/to/logstash create a cosmos.conf. bin/logstash -f cosmos.conf cosmos.conf: ``` input { file { path =>…
Excerpt (1198 of 2173 characters). Read the whole post on the forum ↗
Big fan of Kibana myself. Thanks for sharing this!
Can you also share some of the queries you are running to alert on?
Sure, Here are some examples.
1 Blocks Count
2 Error Peers Count
3.Error Peers Location
4 Log For Block #height
query:
BlockHeight:158023
result:
5 Logs For Block Range:
query:
BlockHeight:[158023 TO 158024]
6 Block with transactions
7 Block with evidence (“” means no evidence )
8 Top errors from Info level
If you have any suggestions be free to write a post here.
oh these examples are so inspiring!! thank you ping!!