WEBVTT 00:00.420 --> 00:05.490 ElasticSearch metric, but now it's very similar to fall, big steps are almost identical, but Metric 00:05.490 --> 00:11.370 B is about metrics on your system, such as CPU Disclosure Network, whereas fall it's about rating 00:11.370 --> 00:17.370 locales to download the installer for your operating system of using Debian based Ubuntu twenty point 00:17.370 --> 00:17.880 zero four. 00:17.910 --> 00:19.440 You can see that at that link. 00:20.280 --> 00:23.060 So it's like self-managed and select your OS. 00:23.940 --> 00:27.990 I've already prepared my commands, so I'm just going to copy those to clipboard. 00:28.020 --> 00:30.040 I'm going to use the same server where I put file bait. 00:30.060 --> 00:31.350 That was my mom's cure server. 00:31.410 --> 00:34.210 OK, so clear paste. 00:34.730 --> 00:41.580 So I don't like the seven point sixteen point one AMD64 and press enter again, and it's now using the 00:41.580 --> 00:43.230 package manager to install it. 00:43.440 --> 00:46.560 So it should be there now we can test that is most likely not running. 00:48.140 --> 00:51.860 There we go, so it's loaded, but not active control C to get out of that. 00:52.020 --> 00:55.850 OK, we can see what modules it has enabled disabled. 00:55.910 --> 00:56.510 Copy that? 00:57.530 --> 00:58.940 Mitre Peak Modules List. 00:59.670 --> 01:04.310 OK, so it's a very small default, but there's lots of different modules that you can enable. 01:04.820 --> 01:10.940 Most of them are disabled, but on metric system is already enabled by default, so I don't have to 01:10.940 --> 01:11.420 enable it. 01:11.540 --> 01:17.210 But what I will do is also enable the Linux module because I'm using Linux. 01:17.480 --> 01:23.720 So metric beat modules enable Linux enabled Linux. 01:23.720 --> 01:25.220 Let's check the modules list. 01:26.520 --> 01:30.750 Enabled Linux, a system that's not essential, but I'm just showing it as possible. 01:30.880 --> 01:31.660 OK, very good. 01:31.680 --> 01:32.770 Go to the bottom now. 01:32.790 --> 01:37.290 I'm going to edit the metric, beat women to point it to my ElasticSearch. 01:37.680 --> 01:45.060 So that is in the CD 8c metric folder, less like, say, like file, but it's got assigned modules, 01:45.060 --> 01:45.880 the directory. 01:45.900 --> 01:47.150 It's also got its own why html. 01:47.160 --> 01:48.270 So we'll edit that. 01:48.420 --> 01:53.440 So sudo nano match repeat y eml. 01:53.490 --> 01:53.790 OK? 01:53.880 --> 01:54.960 Scroll down. 01:56.280 --> 01:57.450 I'm not using Cabana. 01:58.760 --> 02:07.010 Terry, the host of my ElasticSearch server, was 10 one three three zero six nine two hundred. 02:08.220 --> 02:10.890 Today, I'm not using that or that or that. 02:12.090 --> 02:12.960 Very good control. 02:13.710 --> 02:14.170 Yes. 02:14.190 --> 02:16.920 To save and to start metric beat. 02:18.470 --> 02:26.750 OK, take a step as a good active running in faith, I just pressed the right arrow, very good control. 02:26.750 --> 02:31.490 So to get out of that now, I've already set up the appropriate firewall rules in the last video, but 02:31.490 --> 02:38.030 you should make sure that your metric beat service can query your ElasticSearch server by running if 02:38.030 --> 02:39.710 you Kirkman's, for example. 02:41.090 --> 02:47.660 Curl, the IP address of your ElasticSearch server, which mine was ten point one three three zero six 02:48.360 --> 02:50.540 nine two and I got a response, excellent. 02:50.570 --> 02:54.770 Also want to know what index was created when this metric beat started up to that? 02:54.930 --> 02:57.980 The score cat slash indices. 02:58.100 --> 03:05.210 Here it is Cat indices until a year ago, there's the new index metric beat seven sixteen point one 03:05.210 --> 03:10.740 and today's date, so I'll be carrying a new data source that points to at least metric beat 716. 03:10.770 --> 03:14.330 So open Cortana data sources this at a data source. 03:15.170 --> 03:17.540 ElasticSearch the URL. 03:18.790 --> 03:29.320 And one three three zero six nine, two hundred and I go down my index name was Metric 716 Dot Star, 03:29.350 --> 03:35.290 so that means I can set up metric weights version seven point sixteen on many servers and point them 03:35.290 --> 03:40.420 to my ElasticSearch server there and read all of those in Gravano. 03:40.790 --> 03:42.820 OK, version seven 10 plus. 03:43.540 --> 03:44.680 OK, save and test. 03:44.890 --> 03:45.640 Very good index. 03:45.640 --> 03:46.060 OK? 03:46.180 --> 03:50.410 And also, before I save it, I'm actually going to rename it to metric based. 03:50.410 --> 03:53.500 So ElasticSearch metric beat like that. 03:54.070 --> 03:54.640 So. 03:55.550 --> 03:56.690 Scientist Yeah. 03:56.740 --> 03:57.490 Oh good. 03:57.970 --> 04:02.200 Now go to explore and we can select that from dropdown. 04:02.800 --> 04:03.210 Excellent. 04:03.220 --> 04:07.940 And we can see lots of data coming through already, so that's possible to query now. 04:07.960 --> 04:12.510 Let's look at logs and it would go see lots of information. 04:12.520 --> 04:14.660 So the information we're going to find here is a bit different. 04:14.680 --> 04:21.370 It's not about log files is about the performance of our server goes to CPU, memory, file descriptors 04:21.370 --> 04:26.560 open and various other things, and we can create a quite interesting dashboard from that and more do 04:26.560 --> 04:27.400 that in the next video. 04:28.500 --> 04:30.360 Excellent metric beat.