Source: https://hub.docker.com/r/sebp/elk/
Goal:
- Collect, search and visualize log data with ELK (Elasticsearch 2.3.5, Logstash 2.3.4, Kibana 4.5.4).
Steps:
I. Setup ELK on localhost.
(1) Obtain the ELK stack
- sudo docker pull sebp/elk
(2) Run the ELK stack
- sudo docker run -p 5601:5601 -p 9200:9200 -p 5044:5044 -p 5000:5000 -it –name elk sebp/elk
(3) Check Elasticsearch & Kibana status
- curl http://0.0.0.0:9200
- curl http://0.0.0.0:5601
II. Load the data using Elasticsearch (Python dict struct data sent to Elasticsearch(http://localhost:9200/))
III. Check index or pattern “*” in localhost:5601
IV. Make sure the table is loaded to Kibana as it is shown below.
V. Visualize it and create dashboards of choice.
Reverse Engineering, Malware Deep Insight 