- 74
- 722 655
Ali Younes
Canada
เข้าร่วมเมื่อ 19 ก.พ. 2018
Hello Everyone,
My name is Ali, I am a Network Analyst. I love learning networking technologies and sharing what I learn with the IT community. I earned a couple of Cisco CCNA certificates, Fortinet NSE4, and am currently working on my CCNP studies and network automation with Python.
In this channel, I share what I learn and try to explain things that gave me a hard time so you don't struggle as much 😄
Subscribe and enjoy the learning!
My name is Ali, I am a Network Analyst. I love learning networking technologies and sharing what I learn with the IT community. I earned a couple of Cisco CCNA certificates, Fortinet NSE4, and am currently working on my CCNP studies and network automation with Python.
In this channel, I share what I learn and try to explain things that gave me a hard time so you don't struggle as much 😄
Subscribe and enjoy the learning!
Install and Configure a Secure Elastic Stack
#elasticsearch #logstash #kibana #elasticsearchtutorial
Get started with the Elastic Stack. All You Need to Get Started on the Elastic Stack: Elasticsearch, Logstash, Beats and Kibana
In this lesson, we demonstrate how to install and configure Elasticsearch, form a cluster, and install and configure Kibana.
00:00 - Intro
01:25 - Overview
01:56 - Install Elasticsearch
08:32 - Configure Elasticsearch
11:35 - Form a cluster
20:38 - Add Node3 to cluster
21:45 - Install Kibana
24:16 - Configure Kibana
27:47 - Access Kibana
30:52 - Outro
Access the official documentation:
www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html
Follow my Twitter: ayounes9
Follow my LinkedIn: www.linkedin.com/in/aliyounes9/
Get started with the Elastic Stack. All You Need to Get Started on the Elastic Stack: Elasticsearch, Logstash, Beats and Kibana
In this lesson, we demonstrate how to install and configure Elasticsearch, form a cluster, and install and configure Kibana.
00:00 - Intro
01:25 - Overview
01:56 - Install Elasticsearch
08:32 - Configure Elasticsearch
11:35 - Form a cluster
20:38 - Add Node3 to cluster
21:45 - Install Kibana
24:16 - Configure Kibana
27:47 - Access Kibana
30:52 - Outro
Access the official documentation:
www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html
Follow my Twitter: ayounes9
Follow my LinkedIn: www.linkedin.com/in/aliyounes9/
มุมมอง: 422
วีดีโอ
Master the Elastic Stack: Elastic Stack Overview
มุมมอง 6652 หลายเดือนก่อน
#elasticsearch #logstash #kibana Get started with the Elastic Stack. All You Need to Get Started on the Elastic Stack: Elasticsearch, Logstash, Beats and Kibana In this lesson, we explain what the Elastic Stack is, its components, architecture, usage, benefits and features. 00:00 - Introduction 01:08 - Learning Objectives 01:55 - Components 04:19 - Archtecture 05:18 - Usage 06:25 - Benefits 07:...
Ingest Cisco ASA Firewall Syslogs into the Elastic Stack
มุมมอง 2.1K7 หลายเดือนก่อน
#cisco #elasticsearch #logstash #kibana In this video, we ingest the Cisco ASA Syslogs into an Elasticsearch cluster using 3 methods: Logstash, Filebeat and the Elastic Agent. 00:00 - Introduction 00:53 - Tutorial lab setup 02:43 - Cisco ASA Logging Setup 03:56 - Method 1: Logstash 16:39 - Method 2: Filebeat 21:24 - Method 3: Elastic Agent 27:06 - Outro Access the Logstash configuration file on...
FortiGate SNMP Monitoring with Logstash
มุมมอง 2.6K9 หลายเดือนก่อน
#elasticsearch #elasticsearchtutorial #logstash #kibana #fortinet #fortigate In this video, we walk through the steps to monitor a FortiGate firewall with Logstash using the SNMP Input Plugin. Watch how to install Elasticsearch and Kibana: th-cam.com/video/kkrLanotz1I/w-d-xo.html Thank you for watching! Follow my Twitter: ayounes9 Follow my LinkedIn: www.linkedin.com/in/aliyounes9/
Build a Custom Docker Image for Logstash
มุมมอง 2.5K10 หลายเดือนก่อน
#elasticsearch #logstash #kibana #docker #dockerfile #filebeat #metricbeat In this tutorial, we build a custom docker image for Logstash, to run containers quickly. The files are available on GitHub: github.com/ayounes9/Logstash_Docker_Image.git Check out this tutorial on how to ingest Fortigate syslogs with Logstash: th-cam.com/video/Tp5dI-GDerM/w-d-xo.html Thank you for watching! Follow my Tw...
Install Elasticsearch Kibana and Logstash with Docker
มุมมอง 26K11 หลายเดือนก่อน
#elasticsearch #filebeat #kibana #elasticsearchtutorial #logstash #metricbeat #docker #dockercompose #dockercontainer In this video, we install Elasticsearch, Kibana, and Logstash using Docker Compose. This is a way to bring up a cluster for quick testing and development. You can get the files from my GitHub ink: github.com/ayounes9/elk-on-docker.git Watch how to install Elasticsearch and Kiban...
Enrich your Data in Elasticsearch
มุมมอง 3Kปีที่แล้ว
#elasticsearch #filebeat #kibana #elasticsearchtutorial #logstash #metricbeat In this tutorial, we setup data enriching in Elasticsearch to have more insights and richer data sets that will provide more understanding and relevance. Watch how to visualize FortiGate logs on Kibana: th-cam.com/video/03Krtx5XSlM/w-d-xo.html Thank you for watching! Follow my Twitter: ayounes9 Follow my L...
Packetbeat Installation and Configuration
มุมมอง 2.6Kปีที่แล้ว
#elasticsearch #kibana #logstash #filebeat #packetbeat #metricbeat In this video, we talk about Packetbeat, how to install and configure it to capture network traffic and analyze them in Kibana. Watch how to install Fleet Server and Elastic Agent: th-cam.com/video/UHQrOdwUg68/w-d-xo.html Thank you for watching! Follow my Twitter: ayounes9
Send Email Alerts for FREE with ElastAlert2
มุมมอง 9Kปีที่แล้ว
#elasticsearch #kibana #logstash #filebeat This video shows you how to setup ElastAlert2 to connect to your Elasticsearch cluster and send email alerts from your data that match a rule. Watch how I installed and configured Logstash to ingest FortiGate Syslogs: th-cam.com/video/Tp5dI-GDerM/w-d-xo.html Thank you for watching! Follow my Twitter: ayounes9
Send Email Alerts for FREE with the Email Output Plugin in Logstash
มุมมอง 4.9Kปีที่แล้ว
#elasticsearch #logstash #kibana #fortigate This is a simple way to send email alerts directly from Logstash for free. With the help of the Email Output Plugin, you can send yourself and your team alerts in real-time to get notified on the important events! Watch how I installed and configured Logstash to ingest FortiGate Syslogs: th-cam.com/video/Tp5dI-GDerM/w-d-xo.html Thank you for watching!...
Using Timelion for Bandwidth Graphs in Kibana
มุมมอง 2.1Kปีที่แล้ว
#elasticsearch #elasticsearchtutorial #kibana In this video, we are using Timelion to graph the bandwidth of a FortiGate firewall interface. In a previous video, I explained how to get the bandwidth stats into Elasticsearch. Check it out here: th-cam.com/video/VGgqIVsAzhI/w-d-xo.html Thank you for watching! Follow my Twitter: ayounes9 Follow my Blog: www.thelionping.com/
Sending FortiGate Bandwidth Stats to Elasticsearch
มุมมอง 3.5Kปีที่แล้ว
#elasticsearch #kibana #logstash #elasticsearchtutorial #fortigate #fortinet In this tutorial, I am using a Raspberry Pi to send API GET requests to the FortiGate and grab the bandwidth stats of a specific interface. Then using Logstash, I parse the data and send it to Elasticsearch. NOTE The FortiGate needs to be running FortiOS 7.0 and above to be able to use this API. Thank you for watching!...
Set up Fleet Server and Install Elastic Agent
มุมมอง 41Kปีที่แล้ว
#elasticsearch #elasticsearchtutorial #kibana #filebeat #ElasticAgent In this video, we setup and install a Fleet server and enroll an Elastic Agent that will receive Fortinet FortiGate Syslogs and send them to Elasticsearch using the Fortinet integration. To setup security for an Elasticsearch cluster: th-cam.com/video/w3taEk9tAQ4/w-d-xo.html Thank you for watching! Follow my Twitter: twitter....
Using Index Lifecycle Management (ILM) with Logstash
มุมมอง 9Kปีที่แล้ว
#elasticsearch #elasticsearchtutorial #logstash #kibana #filebeat This video shows how to setup ILM with Logstash configuration files. Watch how to install and setup Logstash to ingest Fortinet Syslogs: th-cam.com/video/Tp5dI-GDerM/w-d-xo.html Watch how to setup Index Lifecycle Management ILM in Elasticsearch: th-cam.com/video/TPO6WzRp6Vo/w-d-xo.html Thank you for watching! Follow my Twitter: t...
Monitor Logstash with Metricbeat
มุมมอง 4.2Kปีที่แล้ว
#elasticsearch #kibana #logstash #metricbeat #elasticsearchtutorial In this video, I am using Metricbeat to monitor the Logstash node to be able to see node and pipeline metrics in the Kibana Stack Monitoring UI. Watch how I use Metricbeat to monitor Elasticsearch: th-cam.com/video/1T_dhhlX7xw/w-d-xo.html Watch how to generate certificates to secure the Elasticsearch cluster: th-cam.com/video/w...
Rolling Restart of an Elasticsearch Cluster
มุมมอง 2.9Kปีที่แล้ว
Rolling Restart of an Elasticsearch Cluster
Setting Up Elasticsearch ILM - Index Lifecycle Management
มุมมอง 27K2 ปีที่แล้ว
Setting Up Elasticsearch ILM - Index Lifecycle Management
Setup Filebeat to Monitor Elasticsearch Logs
มุมมอง 34K2 ปีที่แล้ว
Setup Filebeat to Monitor Elasticsearch Logs
Adding Nodes to an Elasticsearch Cluster
มุมมอง 15K2 ปีที่แล้ว
Adding Nodes to an Elasticsearch Cluster
Installing and Configuring Filebeat Fortinet Module
มุมมอง 15K2 ปีที่แล้ว
Installing and Configuring Filebeat Fortinet Module
Installing and Configuring Logstash to Ingest Fortinet Syslogs
มุมมอง 36K2 ปีที่แล้ว
Installing and Configuring Logstash to Ingest Fortinet Syslogs
Installing and Configuring Elasticsearch and Kibana 8.x
มุมมอง 81K2 ปีที่แล้ว
Installing and Configuring Elasticsearch and Kibana 8.x
CCNA | Configure a Floating Static Route
มุมมอง 3K2 ปีที่แล้ว
CCNA | Configure a Floating Static Route
CCNA | Configure EtherChannel on Cisco Switches
มุมมอง 2972 ปีที่แล้ว
CCNA | Configure EtherChannel on Cisco Switches
CCNA | Configure a Cisco Router as a DHCP Server
มุมมอง 2343 ปีที่แล้ว
CCNA | Configure a Cisco Router as a DHCP Server
CCNA | Cisco Switch Initial Configuration
มุมมอง 4213 ปีที่แล้ว
CCNA | Cisco Switch Initial Configuration
The backup file exported in this way does not export the "config system admin", do you know how I can make this item exported together with the API?
any helps how to add metricbeat as docker to the stack for cluster monitoring?
How can I take data from MySQL db?
hello sir i am getting this issue when i click on fleet "Kibana cannot connect to the Elastic Package Registry, which provides Elastic Agent integrations Ensure the proxy server(opens in a new tab or window) or your own registry(opens in a new tab or window) is configured correctly, or try again later. " how can i resolve this issue ?
i wish there were a like button which can generate tons of likes..i would do that on this video!! you have solve my biggest problem!!thanks a lot boss
Glad it helped!
Hi Ali, fantastic video - works like a charm. Thx for the effort. I have one or two questions regarding adding additional containers to the docker-compose file. If i add additional containers, i get the following error, validating /home/test/elk/docker-compose.yml: services.logstash Additional property filebeat is not allowed. Can file beat just be added as a separate container instead of adding it to the docker-compose file?
You can add it as a separate container, but I think the error is because Filebeat has to be on the same level as Logstash under the "services" key in the docker-compose.yml file.
Hi, ca we send log from fortigate directly to logstash/elasticsearch withtout filebeat? I mean, Why do most tutorials always use Filebeat?
Yes you can send to Logstash without Filebeat. I have this tutorial explaining how to install Logstash and send Fortigate logs to it: th-cam.com/video/Tp5dI-GDerM/w-d-xo.htmlsi=9XJLRCBk_R91-BZk
i have question about ILM is it possible to create lifecycle policy for index pattern not just an index
I made a video on ILM, check it out here: th-cam.com/video/Ybbk44mkOE0/w-d-xo.htmlsi=X9WjOrNFA6Mv106e
Thank you, Ali, for this video, useful one.
Still valid in 2024! Thank you for the help!
thank youuuu brother ❤
I almost gave up installing ELK 8. Thank you very much for the straight and forward video. The only difference I have to make is setting cluster name and keeping the node-name disabled. Much respect
thank you! :D i have stuck configuring kibana and elastic search for weeks Thanks again for the clear guidance
Just what I needed - Brilliant!
Amazing video!! thank you Ali
wonderfull video
Hey, I was able to download and setup filebeat and it showed me that kibana dashboard must be running and reachable but when I refresh the page the logs section shows me that I still need to install filebeat which I have already done
Hi Ali, Do you think ElasticSearch can be used for documents archiving and records management. I work for engineering company where project can produce 10s of thousands of documents . All those need to be archived provided retention schedule before records\files are destroyed (deleted from they system with log documenting the destruction event).
Python errors with elastalerts2! Its not working! And remove dislike wtf?
thanks you man 🙏
that was the clearest explanation I've seen for timelion- I wish I had seen it years ago!😄
Very great job. Sufficient and very good explanations. very practical
That is really helpfull !!!
Thanks a lot for the great explanation! It was really useful as it gave the two ways to deploy ILM (with and without rollover)
I run your docker-compose file but get this error in Kinaba: FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [16] but it must have a minimum length of [32].
ENCRIPTION_KEY on .env should have at least 32 chars, the default value <encriptation_data> has 16...
MAD RESPECT!! Clear explanations, well-paced tutorials, and incredibly useful content. Big props to you Ali for making complex topics so accessible and engaging. waiting for more about elastic stack kafka, load balancing, reverse proxies, integration with TheHive, Cortex... Keep up the fantastic work may Allah bless you! ❤🙏
Despite configuring SSL certificates why it appears insecure n the browser?????????????????????????????????
awesome, ill wait for next lectures
followed this but every time I join a node it crashes the master, if I restart the master it crashes the node. any ideas?
Thanks a ton for this, was looking for this for a while.
Here in this video , Can you show me how to extract ip address and assign to other field ?because i want to populate that ip in the other slot
Im confused, what's the difference between elastic agent and apm agent or are these the same?
Great what if i have multiple elasticsearch node, How we can define in kibana.yml
my logstash cannot conect to elastic.. i already put in false the security... logs in logstash are like this: [2024-06-07T08:06:29,273][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"localhost:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
Thank you!
Hey man, I don't get data on some fields and I miss data in the dashboard. How do I resolve this?
Deserve an applause. you cover all basic details to setup the elasticsearch and kibana,
Thank you very much for your great tutorial. Even if the Elastic documentation explains similar steps but there were many steps not working, but you shown them practically.
which one is better depends on performance, send log via filebeat or via logstash?
i cant understand the difference between logstash and filebeat, why not using just filebeat instead of logstash?
same with me lol!
I miss a lot of fields! How do I get these?
How to resolve the hot node disk is full I have unassigned shards and the indices health is red
Hi I want to install ELK on a test/production server can you please me for that
i have error : org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:808) ~[jruby.jar:?] at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:767) ~[jruby.jar:?] at usr.share.logstash.lib.bootstrap.environment.<main>(/usr/share/logstash/lib/bootstrap/en vironment.rb:90) ~[?:?]
i want to add fleet server hosts as http. is it possible ? I am doing everything on localhost
Hi ali... I am facing an issue.... After following these steps i am unable to connect to elasticsearch search from my logstash server.... Can you help
Nice Vid Ali. I've installed Fleet and some Integrations. But when I try a CISCO FTD, the installation gets completed, No errors observed. Yet the Data Streams are not created. Any suggestion? I am supposed to receive the logs into a Ingestion Server with the Elastic Agent installed and the FTD sends the logs to the Ingestion server. In my integration I am using the IP address of the Ingestion server port 9003. The Ingestion server windows firewall has the UDP port opened. All this is on Windows btw. I use the same Agent policy for both the Windows OS and the Cisco devices. I tried to create a new Cisco policy to separate the logs, but then it tries to install the Agent on the Ingestion server which has the Elastic Agent already installed for the other Integrations. I even changed the Namespace on the Integration settings to user other name than "default" and eve tried with "default". Same results whatsoever. Thanks for your help if at all possible.
We just moved from a pfsense netgate + dell switch setup to a full 2x fortigate 100f in HA + 3 stacked Fortiswitches so, trying to learn as much as I can about this environment.
ELK version upgradation please please to V 8.12.0
why does this not work for me lol. I can't access kibana even after following all the steps