Lab 1.6: Send Logs to ELK Stack¶
Configure f5 for logging to new ELK stack
Check that data is arriving at ELK stack
Task 1 - Confirm BIG-IP is sending logs to ELK Stack¶
- Confirm via TMUI that the setup from Class 1 Lab 2.1
Update AFM Reporting to include what was not included in previous lab.
Note
- Make sure the correct port is allocated as per previous Logstash configuration
- Pool = tcp server:5514 - PEM
- Pool = tcp server:5515 - DNS
- Pool = tcp server:5516 - AFM/CGNAT
- Confirm Data is arrinving on server
sudo tcpdump -i eth1 port 5514
- Check that Data is arriving in the Index
curl ‘localhost:9200/_cat/indices?v’
or via POSTMAN
