![Ali Younes](/img/default-banner.jpg)
- Видео 74
- Просмотров 720 039
Ali Younes
Канада
Добавлен 19 фев 2018
Hello Everyone,
My name is Ali, I am a Network Analyst. I love learning networking technologies and sharing what I learn with the IT community. I earned a couple of Cisco CCNA certificates, Fortinet NSE4, and am currently working on my CCNP studies and network automation with Python.
In this channel, I share what I learn and try to explain things that gave me a hard time so you don't struggle as much 😄
Subscribe and enjoy the learning!
My name is Ali, I am a Network Analyst. I love learning networking technologies and sharing what I learn with the IT community. I earned a couple of Cisco CCNA certificates, Fortinet NSE4, and am currently working on my CCNP studies and network automation with Python.
In this channel, I share what I learn and try to explain things that gave me a hard time so you don't struggle as much 😄
Subscribe and enjoy the learning!
Install and Configure a Secure Elastic Stack
#elasticsearch #logstash #kibana #elasticsearchtutorial
Get started with the Elastic Stack. All You Need to Get Started on the Elastic Stack: Elasticsearch, Logstash, Beats and Kibana
In this lesson, we demonstrate how to install and configure Elasticsearch, form a cluster, and install and configure Kibana.
00:00 - Intro
01:25 - Overview
01:56 - Install Elasticsearch
08:32 - Configure Elasticsearch
11:35 - Form a cluster
20:38 - Add Node3 to cluster
21:45 - Install Kibana
24:16 - Configure Kibana
27:47 - Access Kibana
30:52 - Outro
Access the official documentation:
www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html
Follow my Twitter: ayounes9
Follow my LinkedIn: www.linkedin.c...
Get started with the Elastic Stack. All You Need to Get Started on the Elastic Stack: Elasticsearch, Logstash, Beats and Kibana
In this lesson, we demonstrate how to install and configure Elasticsearch, form a cluster, and install and configure Kibana.
00:00 - Intro
01:25 - Overview
01:56 - Install Elasticsearch
08:32 - Configure Elasticsearch
11:35 - Form a cluster
20:38 - Add Node3 to cluster
21:45 - Install Kibana
24:16 - Configure Kibana
27:47 - Access Kibana
30:52 - Outro
Access the official documentation:
www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html
Follow my Twitter: ayounes9
Follow my LinkedIn: www.linkedin.c...
Просмотров: 362
Видео
Master the Elastic Stack: Elastic Stack Overview
Просмотров 6302 месяца назад
#elasticsearch #logstash #kibana Get started with the Elastic Stack. All You Need to Get Started on the Elastic Stack: Elasticsearch, Logstash, Beats and Kibana In this lesson, we explain what the Elastic Stack is, its components, architecture, usage, benefits and features. 00:00 - Introduction 01:08 - Learning Objectives 01:55 - Components 04:19 - Archtecture 05:18 - Usage 06:25 - Benefits 07:...
Ingest Cisco ASA Firewall Syslogs into the Elastic Stack
Просмотров 2 тыс.7 месяцев назад
#cisco #elasticsearch #logstash #kibana In this video, we ingest the Cisco ASA Syslogs into an Elasticsearch cluster using 3 methods: Logstash, Filebeat and the Elastic Agent. 00:00 - Introduction 00:53 - Tutorial lab setup 02:43 - Cisco ASA Logging Setup 03:56 - Method 1: Logstash 16:39 - Method 2: Filebeat 21:24 - Method 3: Elastic Agent 27:06 - Outro Access the Logstash configuration file on...
FortiGate SNMP Monitoring with Logstash
Просмотров 2,5 тыс.8 месяцев назад
#elasticsearch #elasticsearchtutorial #logstash #kibana #fortinet #fortigate In this video, we walk through the steps to monitor a FortiGate firewall with Logstash using the SNMP Input Plugin. Watch how to install Elasticsearch and Kibana: ruclips.net/video/kkrLanotz1I/видео.html Thank you for watching! Follow my Twitter: ayounes9 Follow my LinkedIn: www.linkedin.com/in/aliyounes9/
Build a Custom Docker Image for Logstash
Просмотров 2,5 тыс.10 месяцев назад
#elasticsearch #logstash #kibana #docker #dockerfile #filebeat #metricbeat In this tutorial, we build a custom docker image for Logstash, to run containers quickly. The files are available on GitHub: github.com/ayounes9/Logstash_Docker_Image.git Check out this tutorial on how to ingest Fortigate syslogs with Logstash: ruclips.net/video/Tp5dI-GDerM/видео.html Thank you for watching! Follow my Tw...
Install Elasticsearch Kibana and Logstash with Docker
Просмотров 26 тыс.10 месяцев назад
#elasticsearch #filebeat #kibana #elasticsearchtutorial #logstash #metricbeat #docker #dockercompose #dockercontainer In this video, we install Elasticsearch, Kibana, and Logstash using Docker Compose. This is a way to bring up a cluster for quick testing and development. You can get the files from my GitHub ink: github.com/ayounes9/elk-on-docker.git Watch how to install Elasticsearch and Kiban...
Enrich your Data in Elasticsearch
Просмотров 3 тыс.Год назад
#elasticsearch #filebeat #kibana #elasticsearchtutorial #logstash #metricbeat In this tutorial, we setup data enriching in Elasticsearch to have more insights and richer data sets that will provide more understanding and relevance. Watch how to visualize FortiGate logs on Kibana: ruclips.net/video/03Krtx5XSlM/видео.html Thank you for watching! Follow my Twitter: ayounes9 Follow my L...
Packetbeat Installation and Configuration
Просмотров 2,6 тыс.Год назад
#elasticsearch #kibana #logstash #filebeat #packetbeat #metricbeat In this video, we talk about Packetbeat, how to install and configure it to capture network traffic and analyze them in Kibana. Watch how to install Fleet Server and Elastic Agent: ruclips.net/video/UHQrOdwUg68/видео.html Thank you for watching! Follow my Twitter: ayounes9
Send Email Alerts for FREE with ElastAlert2
Просмотров 9 тыс.Год назад
#elasticsearch #kibana #logstash #filebeat This video shows you how to setup ElastAlert2 to connect to your Elasticsearch cluster and send email alerts from your data that match a rule. Watch how I installed and configured Logstash to ingest FortiGate Syslogs: ruclips.net/video/Tp5dI-GDerM/видео.html Thank you for watching! Follow my Twitter: ayounes9
Send Email Alerts for FREE with the Email Output Plugin in Logstash
Просмотров 4,9 тыс.Год назад
#elasticsearch #logstash #kibana #fortigate This is a simple way to send email alerts directly from Logstash for free. With the help of the Email Output Plugin, you can send yourself and your team alerts in real-time to get notified on the important events! Watch how I installed and configured Logstash to ingest FortiGate Syslogs: ruclips.net/video/Tp5dI-GDerM/видео.html Thank you for watching!...
Using Timelion for Bandwidth Graphs in Kibana
Просмотров 2,1 тыс.Год назад
#elasticsearch #elasticsearchtutorial #kibana In this video, we are using Timelion to graph the bandwidth of a FortiGate firewall interface. In a previous video, I explained how to get the bandwidth stats into Elasticsearch. Check it out here: ruclips.net/video/VGgqIVsAzhI/видео.html Thank you for watching! Follow my Twitter: ayounes9 Follow my Blog: www.thelionping.com/
Sending FortiGate Bandwidth Stats to Elasticsearch
Просмотров 3,4 тыс.Год назад
#elasticsearch #kibana #logstash #elasticsearchtutorial #fortigate #fortinet In this tutorial, I am using a Raspberry Pi to send API GET requests to the FortiGate and grab the bandwidth stats of a specific interface. Then using Logstash, I parse the data and send it to Elasticsearch. NOTE The FortiGate needs to be running FortiOS 7.0 and above to be able to use this API. Thank you for watching!...
Set up Fleet Server and Install Elastic Agent
Просмотров 41 тыс.Год назад
#elasticsearch #elasticsearchtutorial #kibana #filebeat #ElasticAgent In this video, we setup and install a Fleet server and enroll an Elastic Agent that will receive Fortinet FortiGate Syslogs and send them to Elasticsearch using the Fortinet integration. To setup security for an Elasticsearch cluster: ruclips.net/video/w3taEk9tAQ4/видео.html Thank you for watching! Follow my Twitter: twitter....
Using Index Lifecycle Management (ILM) with Logstash
Просмотров 9 тыс.Год назад
#elasticsearch #elasticsearchtutorial #logstash #kibana #filebeat This video shows how to setup ILM with Logstash configuration files. Watch how to install and setup Logstash to ingest Fortinet Syslogs: ruclips.net/video/Tp5dI-GDerM/видео.html Watch how to setup Index Lifecycle Management ILM in Elasticsearch: ruclips.net/video/TPO6WzRp6Vo/видео.html Thank you for watching! Follow my Twitter: t...
Monitor Logstash with Metricbeat
Просмотров 4,1 тыс.Год назад
#elasticsearch #kibana #logstash #metricbeat #elasticsearchtutorial In this video, I am using Metricbeat to monitor the Logstash node to be able to see node and pipeline metrics in the Kibana Stack Monitoring UI. Watch how I use Metricbeat to monitor Elasticsearch: ruclips.net/video/1T_dhhlX7xw/видео.html Watch how to generate certificates to secure the Elasticsearch cluster: ruclips.net/video/...
Rolling Restart of an Elasticsearch Cluster
Просмотров 2,9 тыс.Год назад
Rolling Restart of an Elasticsearch Cluster
Visualizing FortiGate Logs on Kibana
Просмотров 9 тыс.2 года назад
Visualizing FortiGate Logs on Kibana
Setting Up Elasticsearch ILM - Index Lifecycle Management
Просмотров 27 тыс.2 года назад
Setting Up Elasticsearch ILM - Index Lifecycle Management
Setup Filebeat to Monitor Elasticsearch Logs
Просмотров 33 тыс.2 года назад
Setup Filebeat to Monitor Elasticsearch Logs
Adding Nodes to an Elasticsearch Cluster
Просмотров 15 тыс.2 года назад
Adding Nodes to an Elasticsearch Cluster
Monitor Elasticsearch with Metricbeat
Просмотров 16 тыс.2 года назад
Monitor Elasticsearch with Metricbeat
Installing and Configuring Filebeat Fortinet Module
Просмотров 15 тыс.2 года назад
Installing and Configuring Filebeat Fortinet Module
Installing and Configuring Logstash to Ingest Fortinet Syslogs
Просмотров 36 тыс.2 года назад
Installing and Configuring Logstash to Ingest Fortinet Syslogs
Installing and Configuring Elasticsearch and Kibana 8.x
Просмотров 80 тыс.2 года назад
Installing and Configuring Elasticsearch and Kibana 8.x
CCNA | Configure a Floating Static Route
Просмотров 3 тыс.2 года назад
CCNA | Configure a Floating Static Route
CCNA | Configure EtherChannel on Cisco Switches
Просмотров 2952 года назад
CCNA | Configure EtherChannel on Cisco Switches
CCNA | Configure a Cisco Router as a DHCP Server
Просмотров 2343 года назад
CCNA | Configure a Cisco Router as a DHCP Server
CCNA | Cisco Switch Initial Configuration
Просмотров 4213 года назад
CCNA | Cisco Switch Initial Configuration
How can I take data from MySQL db?
hello sir i am getting this issue when i click on fleet "Kibana cannot connect to the Elastic Package Registry, which provides Elastic Agent integrations Ensure the proxy server(opens in a new tab or window) or your own registry(opens in a new tab or window) is configured correctly, or try again later. " how can i resolve this issue ?
i wish there were a like button which can generate tons of likes..i would do that on this video!! you have solve my biggest problem!!thanks a lot boss
Glad it helped!
Hi Ali, fantastic video - works like a charm. Thx for the effort. I have one or two questions regarding adding additional containers to the docker-compose file. If i add additional containers, i get the following error, validating /home/test/elk/docker-compose.yml: services.logstash Additional property filebeat is not allowed. Can file beat just be added as a separate container instead of adding it to the docker-compose file?
You can add it as a separate container, but I think the error is because Filebeat has to be on the same level as Logstash under the "services" key in the docker-compose.yml file.
Hi, ca we send log from fortigate directly to logstash/elasticsearch withtout filebeat? I mean, Why do most tutorials always use Filebeat?
Yes you can send to Logstash without Filebeat. I have this tutorial explaining how to install Logstash and send Fortigate logs to it: ruclips.net/video/Tp5dI-GDerM/видео.htmlsi=9XJLRCBk_R91-BZk
i have question about ILM is it possible to create lifecycle policy for index pattern not just an index
I made a video on ILM, check it out here: ruclips.net/video/Ybbk44mkOE0/видео.htmlsi=X9WjOrNFA6Mv106e
Thank you, Ali, for this video, useful one.
Still valid in 2024! Thank you for the help!
thank youuuu brother ❤
I almost gave up installing ELK 8. Thank you very much for the straight and forward video. The only difference I have to make is setting cluster name and keeping the node-name disabled. Much respect
thank you! :D i have stuck configuring kibana and elastic search for weeks Thanks again for the clear guidance
Just what I needed - Brilliant!
Amazing video!! thank you Ali
wonderfull video
Hey, I was able to download and setup filebeat and it showed me that kibana dashboard must be running and reachable but when I refresh the page the logs section shows me that I still need to install filebeat which I have already done
Hi Ali, Do you think ElasticSearch can be used for documents archiving and records management. I work for engineering company where project can produce 10s of thousands of documents . All those need to be archived provided retention schedule before records\files are destroyed (deleted from they system with log documenting the destruction event).
Python errors with elastalerts2! Its not working! And remove dislike wtf?
thanks you man 🙏
that was the clearest explanation I've seen for timelion- I wish I had seen it years ago!😄
Very great job. Sufficient and very good explanations. very practical
That is really helpfull !!!
Thanks a lot for the great explanation! It was really useful as it gave the two ways to deploy ILM (with and without rollover)
I run your docker-compose file but get this error in Kinaba: FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [16] but it must have a minimum length of [32].
ENCRIPTION_KEY on .env should have at least 32 chars, the default value <encriptation_data> has 16...
MAD RESPECT!! Clear explanations, well-paced tutorials, and incredibly useful content. Big props to you Ali for making complex topics so accessible and engaging. waiting for more about elastic stack kafka, load balancing, reverse proxies, integration with TheHive, Cortex... Keep up the fantastic work may Allah bless you! ❤🙏
Despite configuring SSL certificates why it appears insecure n the browser?????????????????????????????????
awesome, ill wait for next lectures
followed this but every time I join a node it crashes the master, if I restart the master it crashes the node. any ideas?
Thanks a ton for this, was looking for this for a while.
Here in this video , Can you show me how to extract ip address and assign to other field ?because i want to populate that ip in the other slot
Im confused, what's the difference between elastic agent and apm agent or are these the same?
Great what if i have multiple elasticsearch node, How we can define in kibana.yml
my logstash cannot conect to elastic.. i already put in false the security... logs in logstash are like this: [2024-06-07T08:06:29,273][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"localhost:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
Thank you!
Hey man, I don't get data on some fields and I miss data in the dashboard. How do I resolve this?
Deserve an applause. you cover all basic details to setup the elasticsearch and kibana,
Thank you very much for your great tutorial. Even if the Elastic documentation explains similar steps but there were many steps not working, but you shown them practically.
which one is better depends on performance, send log via filebeat or via logstash?
i cant understand the difference between logstash and filebeat, why not using just filebeat instead of logstash?
same with me lol!
I miss a lot of fields! How do I get these?
How to resolve the hot node disk is full I have unassigned shards and the indices health is red
Hi I want to install ELK on a test/production server can you please me for that
i have error : org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:808) ~[jruby.jar:?] at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:767) ~[jruby.jar:?] at usr.share.logstash.lib.bootstrap.environment.<main>(/usr/share/logstash/lib/bootstrap/en vironment.rb:90) ~[?:?]
i want to add fleet server hosts as http. is it possible ? I am doing everything on localhost
Hi ali... I am facing an issue.... After following these steps i am unable to connect to elasticsearch search from my logstash server.... Can you help
Nice Vid Ali. I've installed Fleet and some Integrations. But when I try a CISCO FTD, the installation gets completed, No errors observed. Yet the Data Streams are not created. Any suggestion? I am supposed to receive the logs into a Ingestion Server with the Elastic Agent installed and the FTD sends the logs to the Ingestion server. In my integration I am using the IP address of the Ingestion server port 9003. The Ingestion server windows firewall has the UDP port opened. All this is on Windows btw. I use the same Agent policy for both the Windows OS and the Cisco devices. I tried to create a new Cisco policy to separate the logs, but then it tries to install the Agent on the Ingestion server which has the Elastic Agent already installed for the other Integrations. I even changed the Namespace on the Integration settings to user other name than "default" and eve tried with "default". Same results whatsoever. Thanks for your help if at all possible.
We just moved from a pfsense netgate + dell switch setup to a full 2x fortigate 100f in HA + 3 stacked Fortiswitches so, trying to learn as much as I can about this environment.
ELK version upgradation please please to V 8.12.0
why does this not work for me lol. I can't access kibana even after following all the steps
this doesnt work for me and i cant even access my first node or kibana anymore
Great!