Docker ELK

gistfile1.txt

docker run -d -p 9200:9200 \
		--name elasticsearch \
		-p 9300:9300 \
		-v /data:/data dockerfile/elasticsearch \
		/elasticsearch/bin/elasticsearch -Des.config=/data/elasticsearch.yml

docker run --name kibana \
	-d -p 8080:8080 \
	--link elasticsearch:docker.mrloz.xyz \
	clusterhq/kibana

docker run --name nginx \
	-p 80:80 \
	-v /data/www:/usr/share/nginx/html:ro \
	-v /data/nginx.conf:/etc/nginx/nginx.conf \
	-v /data/log:/var/log \
	-d nginx

docker run --name logstash \
	--link=elasticsearch:elasticsearch \
	-v /data/log:/var/host_logs \
	-v /data/nginx-logstash.conf:/etc/confd/templates/logstash.conf.tmpl:ro \
	-d digitalwonderland/logstash

logstash.conf

input {
					file {
									sincedb_path => "/nginx.since"
									path => "/var/host_logs/nginx/access.json"
									codec => "json"
								  add_field => {
											facility => "nginx"
									}
					}
}

output {
				stdout { codec => rubydebug }
				elasticsearch_http {
								host => "{{getv "/elasticsearch/port/9200/tcp/addr"}}"
							  port => "{{getv "/elasticsearch/port/9200/tcp/port"}}"
				}
}