Logstash installation with correction

Prerequisites #

You must have a Linux machine. If you do not have a machine or test environment, we invite you to do the lab on setting up the test environment.

Package manager #

In this lab, we will install Logstash using the package manager that corresponds to your distribution.

1. Identify the distribution

   You must identify the machine's distribution with the different options available to you: file, command.

   You have different options to identify your distribution. The most used is to do it with the lsb_release command:

   root@logstash-formation:/home/debian# lsb_release -a
   Distributor ID: Debian
   ...

   The Linux Standard Base (abbreviation: LSB) is a joint project by a number of Linux distributions under the organizational structure of the Free Standards Group in order to design and standardize the internal structure of GNU/Linux-based operating systems.
   
   Alongside this, another option is to use system files:

   root@logstash-formation:/home/debian# cat /etc/*release
   ID="genericcloud"
   ...

   Depending on the distributions, you may have specific files. For example, in the Debian OS family, you will have the file /etc/[debian|ubuntu|...]_version

2. Install Logstash

   In the previous section, you identified the machine's distribution. You must therefore proceed with its installation by following the procedure that corresponds to the distribution's package manager.

   You must follow the installation procedure that corresponds to your package manager: Logstash Installation
   
   Knowing that you have these matches:

   • YUM / DNF: Fedora family (fedora, redhat, centos, ...)
   • APT: Debian family (debian, ubuntu, ...)

3. Enable automatic startup

   In the previous section, you installed Logstash. In this section we will make sure that it is started and set in the services to start with the system.

   Historically Linux systems used init.d. But if this is the case on your machine, we recommend you update your OS to a newer version that uses systemd. You will thus be able to start and enable your logstash service with the following commands:

   root@logstash-formation:/home/debian# systemctl start logstash
   ...
   root@logstash-formation:/home/debian# systemctl enable logstash
   Created symlink /etc/systemd/system/multi-user.target.wants/logstash.service → /lib/systemd/system/logstash.service.

   
   You have other options for the systemctl command that we encourage you to learn:

   root@logstash-formation:/home/debian# systemctl --help

Difficulty level : ●○○○○ (1/5)