From the course: Complete Guide to Open Source Security
Unlock the full course today
Join today to access over 24,800 courses taught by industry experts.
Installing the Fleet server
From the course: Complete Guide to Open Source Security
Installing the Fleet server
- [Instructor] Before we can enroll any systems to be monitored, we'll need to set up a fleet server, which is the component of ELK that handles interactions between the ELK Stack server and the hosts we're monitoring. To do that, we go to Management, Fleet and as suggested we'll add a fleet server. We'll enter the name as elkstack and the URL as HTTPS 192.168.1.102, and it uses port 8220 for Fleet Server. We will generate Fleet Server Policy. Okay, so elkstack has now provided a command to load the Fleet Server. Let's copy it, use with the copy icon. Okay, let's become root and go to the root folder. Sudo su, put our password in and cd/root. Okay, we'll nano fleet.sh and paste the clipboard in. For simplicity, after we've downloaded the agent, we'll move the elastic agent folder name and call it elagent, and then cd elagent. And we'll install the elastic agent Fleet Server and we'll add the -- insecure flag to avoid problems with certificates. And we'll save that and we will make…
Contents
-
-
-
-
-
-
-
-
-
-
(Locked)
Installing the ELK Stack SIEM8m 19s
-
(Locked)
Upgrading Kibana to HTTPS5m 39s
-
(Locked)
Configuring log integrations3m 48s
-
(Locked)
Installing the Fleet server2m 51s
-
(Locked)
Enrolling hosts into the Fleet server6m 58s
-
(Locked)
Enhancing your logs9m 19s
-
(Locked)
Detecting reconnaissance with the ELK Stack7m 20s
-
(Locked)
Detecting exploitation with the ELK Stack4m 56s
-
(Locked)
Monitoring alerts with the ELK Stack4m 39s
-
(Locked)
-
-
-
-
-
-