G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, uygulama g\u00fcnl\u00fckleri, sunucu metrikleri ve a\u011f ak\u0131\u015flar\u0131 gibi b\u00fcy\u00fck veri k\u00fcmelerini toplamak, depolamak, analiz etmek ve g\u00f6rselle\u015ftirmek, sistem y\u00f6neticileri, geli\u015ftiriciler ve g\u00fcvenlik analistleri i\u00e7in kritik bir \u00f6neme sahiptir. Bu veriler, sistem performans\u0131n\u0131 izlemek, hatalar\u0131 ay\u0131klamak, g\u00fcvenlik olaylar\u0131n\u0131 tespit etmek ve i\u015f zekas\u0131 elde etmek i\u00e7in paha bi\u00e7ilmez bilgiler sunar. Ancak, bu kadar b\u00fcy\u00fck ve \u00e7e\u015fitli veri kaynaklar\u0131n\u0131 manuel olarak y\u00f6netmek ve anlamland\u0131rmak neredeyse imkans\u0131zd\u0131r. \u0130\u015fte bu noktada ELK Y\u0131\u011f\u0131n\u0131 (Elasticsearch, Logstash ve Kibana) devreye girer.<\/p>\n
ELK Y\u0131\u011f\u0131n\u0131, Elastic taraf\u0131ndan geli\u015ftirilen ve a\u00e7\u0131k kaynakl\u0131 ara\u00e7lardan olu\u015fan g\u00fc\u00e7l\u00fc bir platformdur. Her bir bile\u015fen belirli bir amaca hizmet eder:<\/p>\n
Bu rehber, Ubuntu 14.04 i\u015fletim sistemi \u00fczerinde Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 versiyonlar\u0131n\u0131n ad\u0131m ad\u0131m nas\u0131l kurulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ayr\u0131nt\u0131l\u0131 olarak a\u00e7\u0131klamaktad\u0131r. Belirtilen bu versiyonlar, \u00f6zellikle eski sistemlerle uyumluluk veya belirli proje gereksinimleri nedeniyle tercih edilebilir. Modern ELK s\u00fcr\u00fcmleri daha farkl\u0131 kurulum ve yap\u0131land\u0131rma ad\u0131mlar\u0131na sahip olsa da, bu rehber eski sistemlerle \u00e7al\u0131\u015fanlar i\u00e7in de\u011ferli bir kaynak olacakt\u0131r. Amac\u0131m\u0131z, bu g\u00fc\u00e7l\u00fc y\u0131\u011f\u0131n\u0131 kurarak loglar\u0131n\u0131z\u0131 ve di\u011fer verilerinizi merkezi bir konumda toplay\u0131p analiz etmeye ba\u015flaman\u0131za yard\u0131mc\u0131 olmakt\u0131r.<\/p>\n
ELK Y\u0131\u011f\u0131n\u0131 kurulumuna ba\u015flamadan \u00f6nce, sisteminizin belirli gereksinimleri kar\u015f\u0131lad\u0131\u011f\u0131ndan emin olmal\u0131s\u0131n\u0131z. Bu b\u00f6l\u00fcm, kurulum i\u00e7in gerekli olan temel \u00f6n ko\u015fullar\u0131 ve bunlar\u0131n nas\u0131l sa\u011flanaca\u011f\u0131n\u0131 a\u00e7\u0131klamaktad\u0131r.<\/p>\n
Bu rehber, Ubuntu 14.04 LTS (Trusty Tahr) \u00fczerinde \u00e7al\u0131\u015facak \u015fekilde tasarlanm\u0131\u015ft\u0131r. Sunucunuzun en az 2GB RAM’e sahip olmas\u0131 \u00f6nerilir, ancak daha b\u00fcy\u00fck veri hacimleri i\u00e7in daha fazla RAM ve CPU \u00e7ekirde\u011fi gerekebilir. Disk alan\u0131 da toplanacak veri miktar\u0131na g\u00f6re de\u011fi\u015fecektir.<\/p>\n
Kurulumdan \u00f6nce sunucunuzu g\u00fcncellemek iyi bir uygulamad\u0131r:<\/p>\n
sudo apt-get update\nsudo apt-get upgrade -y\n<\/code><\/pre>\nSudo Yetkilerine Sahip Kullan\u0131c\u0131<\/h4>\n
Kurulum ad\u0131mlar\u0131n\u0131n \u00e7o\u011fu y\u00f6netici ayr\u0131cal\u0131klar\u0131 gerektirecektir. Bu nedenle, sudo<\/code> komutunu kullanabilen bir kullan\u0131c\u0131 ile oturum a\u00e7t\u0131\u011f\u0131n\u0131zdan emin olun.<\/p>\nJava Kurulumu<\/h4>\n
Elasticsearch ve Logstash, Java sanal makinesi (JVM) \u00fczerinde \u00e7al\u0131\u015f\u0131r. Bu nedenle, sunucunuzda uyumlu bir Java s\u00fcr\u00fcm\u00fcn\u00fcn kurulu olmas\u0131 zorunludur. Elasticsearch 1.7 ve Logstash 1.5 i\u00e7in Java 7 veya Java 8 \u00f6nerilir. Bu rehberde OpenJDK 7’yi kuraca\u011f\u0131z, \u00e7\u00fcnk\u00fc bu s\u00fcr\u00fcm Ubuntu 14.04’\u00fcn varsay\u0131lan depolar\u0131nda kolayca bulunabilir ve ELK y\u0131\u011f\u0131n\u0131n\u0131n belirtilen s\u00fcr\u00fcmleriyle uyumludur.<\/p>\n
OpenJDK 7’yi kurmak i\u00e7in a\u015fa\u011f\u0131daki komutlar\u0131 kullan\u0131n:<\/p>\n
sudo apt-get install -y openjdk-7-jre-headless\n<\/code><\/pre>\n-headless<\/code> paketi, sunucusuz ortamlar i\u00e7in tasarlanm\u0131\u015f minimal bir Java Runtime Environment (JRE) sa\u011flar ve grafik aray\u00fcz\u00fc bile\u015fenlerini i\u00e7ermedi\u011fi i\u00e7in daha az kaynak t\u00fcketir.<\/p>\nKurulumun ba\u015far\u0131l\u0131 oldu\u011funu do\u011frulamak i\u00e7in Java s\u00fcr\u00fcm\u00fcn\u00fc kontrol edin:<\/p>\n
java -version\n<\/code><\/pre>\n\u00c7\u0131kt\u0131, Java 1.7.x s\u00fcr\u00fcm\u00fcn\u00fc g\u00f6stermelidir. \u00d6rne\u011fin:<\/p>\n
java version \"1.7.0_79\"\nOpenJDK Runtime Environment (IcedTea 2.5.6) (7u79-2.5.6-0ubuntu1.14.04.1)\nOpenJDK 64-Bit Server VM (build 24.79-b02, mixed mode)\n<\/code><\/pre>\nElasticsearch 1.7 Kurulumu<\/h3>\n
Elasticsearch, ELK y\u0131\u011f\u0131n\u0131n\u0131n merkezi depolama ve analiz bile\u015fenidir. T\u00fcm log verileri ve di\u011fer yap\u0131land\u0131r\u0131lmam\u0131\u015f veya yar\u0131 yap\u0131land\u0131r\u0131lm\u0131\u015f veriler burada indekslenir ve saklan\u0131r. Elasticsearch 1.7, \u00f6zellikle eski sistemlerle uyumluluk veya belirli bir projede s\u00fcr\u00fcm ba\u011f\u0131ml\u0131l\u0131\u011f\u0131 nedeniyle tercih edilebilir.<\/p>\n
Kurulum Ad\u0131mlar\u0131<\/h4>\n
Elasticsearch’\u00fc resmi Elastic deposundan kurmak en iyi y\u00f6ntemdir, \u00e7\u00fcnk\u00fc bu, gelecekteki g\u00fcncellemeleri kolayla\u015ft\u0131r\u0131r ve paketin do\u011frulu\u011funu garanti eder.<\/p>\n
\u00d6ncelikle, Elastic’in GPG anahtar\u0131n\u0131 sisteminize eklemelisiniz. Bu, indirdi\u011finiz paketlerin ger\u00e7ek Elastic paketleri oldu\u011funu do\u011frulamak i\u00e7in kullan\u0131l\u0131r:<\/p>\n
wget -qO - https:\/\/packages.elastic.co\/GPG-KEY-elasticsearch | sudo apt-key add -\n<\/code><\/pre>\nArd\u0131ndan, Elasticsearch 1.x deposunu sisteminizin kaynak listesine ekleyin. Bu, apt<\/code> paket y\u00f6neticisinin Elasticsearch paketlerini bulmas\u0131n\u0131 sa\u011flayacakt\u0131r:<\/p>\necho \"deb http:\/\/packages.elastic.co\/elasticsearch\/1.7\/debian stable main\" | sudo tee -a \/etc\/apt\/sources.list.d\/elasticsearch-1.7.x.list\n<\/code><\/pre>\nDepoyu ekledikten sonra, paket listesini g\u00fcncelleyin:<\/p>\n
sudo apt-get update\n<\/code><\/pre>\n\u015eimdi Elasticsearch 1.7.6’y\u0131 kurabiliriz. Belirli bir s\u00fcr\u00fcm\u00fc kurmak i\u00e7in paket_ad\u0131=s\u00fcr\u00fcm<\/code> format\u0131n\u0131 kullanmal\u0131y\u0131z:<\/p>\nsudo apt-get install elasticsearch=1.7.6 -y\n<\/code><\/pre>\nKurulumdan sonra, sistemin otomatik olarak daha yeni bir s\u00fcr\u00fcme ge\u00e7mesini engellemek i\u00e7in paketi “tut” durumuna almal\u0131s\u0131n\u0131z:<\/p>\n
sudo apt-mark hold elasticsearch\n<\/code><\/pre>\nYap\u0131land\u0131rma<\/h4>\n
Elasticsearch’\u00fcn temel yap\u0131land\u0131rma dosyas\u0131 \/etc\/elasticsearch\/elasticsearch.yml<\/code> adresinde bulunur. Bu dosyay\u0131 d\u00fczenleyerek Elasticsearch’\u00fcn davran\u0131\u015f\u0131n\u0131 \u00f6zelle\u015ftirebilirsiniz. A\u015fa\u011f\u0131da baz\u0131 \u00f6nemli ayarlar bulunmaktad\u0131r:<\/p>\nYap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/elasticsearch\/elasticsearch.yml\n<\/code><\/pre>\nA\u015fa\u011f\u0131daki ayarlar\u0131 bulun veya ekleyin:<\/p>\n
\ncluster.name<\/code>: Bu, Elasticsearch k\u00fcmenizin ad\u0131d\u0131r. Varsay\u0131lan olarak “elasticsearch” olarak ayarlan\u0131r. K\u00fcmeyi benzersiz bir isimle tan\u0131mlamak iyi bir uygulamad\u0131r, \u00f6zellikle ayn\u0131 a\u011fda birden fazla Elasticsearch k\u00fcmesi \u00e7al\u0131\u015ft\u0131r\u0131yorsan\u0131z.<\/li>\nnode.name<\/code>: Bu, d\u00fc\u011f\u00fcm\u00fcn\u00fcz\u00fcn ad\u0131d\u0131r. Varsay\u0131lan olarak rastgele bir isim atan\u0131r.<\/li>\nnetwork.host<\/code>: Elasticsearch’\u00fcn hangi IP adresini dinleyece\u011fini belirtir. Varsay\u0131lan olarak localhost<\/code> olarak ayarlanm\u0131\u015ft\u0131r, bu da sadece sunucunun kendisinden eri\u015filebilece\u011fi anlam\u0131na gelir. Di\u011fer sunucular\u0131n (Logstash, Kibana) eri\u015febilmesi i\u00e7in sunucunuzun IP adresini veya 0.0.0.0<\/code> (t\u00fcm aray\u00fczleri dinle) olarak ayarlaman\u0131z gerekir. G\u00fcvenlik nedeniyle, yaln\u0131zca belirli bir IP adresini dinlemek daha iyidir.<\/li>\nhttp.port<\/code>: HTTP API’sinin dinleyece\u011fi porttur. Varsay\u0131lan olarak 9200’d\u00fcr.<\/li>\n<\/ul>\n\u00d6rnek yap\u0131land\u0131rma de\u011fi\u015fiklikleri:<\/p>\n
cluster.name: elk-cluster\nnode.name: elk-node-1\nnetwork.host: 0.0.0.0 # veya sunucunuzun \u00f6zel IP adresi\nhttp.port: 9200\n<\/code><\/pre>\nBellek ayarlar\u0131 da \u00f6nemlidir. Elasticsearch’\u00fcn Java Heap Size’\u0131, \/etc\/default\/elasticsearch<\/code> dosyas\u0131nda ayarlan\u0131r. Sunucunuzdaki RAM’in yakla\u015f\u0131k yar\u0131s\u0131n\u0131 Elasticsearch’e ay\u0131rmak iyi bir ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r, ancak 32GB’\u0131 ge\u00e7memelidir.<\/p>\nsudo nano \/etc\/default\/elasticsearch\n<\/code><\/pre>\n\u015eu sat\u0131r\u0131 bulun veya ekleyin:<\/p>\n
ES_HEAP_SIZE=2g # \u00d6rne\u011fin, 4GB RAM'iniz varsa 2g ayarlayabilirsiniz.\n<\/code><\/pre>\nServisi Ba\u015flatma ve Etkinle\u015ftirme<\/h4>\n
Yap\u0131land\u0131rma de\u011fi\u015fikliklerini kaydettikten sonra Elasticsearch servisini ba\u015flat\u0131n ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirin:<\/p>\n
sudo service elasticsearch start\nsudo update-rc.d elasticsearch defaults 95 10\n<\/code><\/pre>\nupdate-rc.d<\/code> komutu, Elasticsearch servisinin sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flat\u0131lmas\u0131n\u0131 sa\u011flar. 95<\/code> ba\u015flatma s\u0131ras\u0131n\u0131, 10<\/code> ise durdurma s\u0131ras\u0131n\u0131 temsil eder.<\/p>\nElasticsearch’\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in a\u015fa\u011f\u0131daki curl<\/code> komutunu kullan\u0131n:<\/p>\ncurl -X GET 'http:\/\/localhost:9200'\n<\/code><\/pre>\nBa\u015far\u0131l\u0131 bir kurulumda, Elasticsearch hakk\u0131nda JSON format\u0131nda bir yan\u0131t almal\u0131s\u0131n\u0131z, bu da s\u00fcr\u00fcm numaras\u0131n\u0131 ve k\u00fcme ad\u0131n\u0131 i\u00e7erecektir.<\/p>\n
Logstash 1.5 Kurulumu<\/h3>\n
Logstash, \u00e7e\u015fitli kaynaklardan veri toplayan, bu verileri d\u00f6n\u00fc\u015ft\u00fcren ve ard\u0131ndan Elasticsearch gibi bir depolama hedefine g\u00f6nderen dinamik bir veri i\u015flem hatt\u0131d\u0131r. Logstash 1.5, \u00f6zellikle Elasticsearch 1.7 ile iyi bir uyumluluk sunar.<\/p>\n
Kurulum Ad\u0131mlar\u0131<\/h4>\n
Logstash’i de Elasticsearch ile ayn\u0131 Elastic deposundan kuraca\u011f\u0131z. GPG anahtar\u0131n\u0131 ve depoyu daha \u00f6nce ekledi\u011fimiz i\u00e7in bu ad\u0131mlar\u0131 tekrar etmemize gerek yok.<\/p>\n
Paket listesini zaten g\u00fcncelledik. \u015eimdi Logstash 1.5.6’y\u0131 kurabiliriz:<\/p>\n
sudo apt-get install logstash=1:1.5.6-1 -y\n<\/code><\/pre>\nYine, paketin otomatik olarak g\u00fcncellenmesini engellemek i\u00e7in tut durumuna almal\u0131s\u0131n\u0131z:<\/p>\n
sudo apt-mark hold logstash\n<\/code><\/pre>\nYap\u0131land\u0131rma<\/h4>\n
Logstash’in yap\u0131land\u0131rmas\u0131, genellikle \/etc\/logstash\/conf.d\/<\/code> dizininde bulunan .conf<\/code> uzant\u0131l\u0131 dosyalar arac\u0131l\u0131\u011f\u0131yla yap\u0131l\u0131r. Bir Logstash yap\u0131land\u0131rma dosyas\u0131 \u00fc\u00e7 ana b\u00f6l\u00fcmden olu\u015fur: input<\/code>, filter<\/code> ve output<\/code>.<\/p>\n\u00d6rnek bir temel yap\u0131land\u0131rma dosyas\u0131 olu\u015ftural\u0131m. Bu dosya, standart girdiden veri alacak, herhangi bir filtre uygulamayacak ve veriyi hem standart \u00e7\u0131kt\u0131ya (konsol) hem de Elasticsearch’e g\u00f6nderecektir.<\/p>\n
sudo nano \/etc\/logstash\/conf.d\/01-simple-pipeline.conf\n<\/code><\/pre>\nDosyan\u0131n i\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n:<\/p>\n
input {\n stdin {\n type => \"stdin-input\"\n }\n}\n\noutput {\n stdout {\n codec => rubydebug\n }\n elasticsearch {\n hosts => [\"localhost:9200\"]\n index => \"logstash-%{+YYYY.MM.dd}\"\n }\n}\n<\/code><\/pre>\nBu yap\u0131land\u0131rma, Logstash’in varsay\u0131lan olarak localhost:9200<\/code> adresindeki Elasticsearch \u00f6rne\u011fine ba\u011flanmas\u0131n\u0131 sa\u011flar. index<\/code> ayar\u0131, Elasticsearch’te olu\u015fturulacak indeksin ad\u0131n\u0131 belirler ve g\u00fcnl\u00fck baz\u0131nda yeni indeksler olu\u015fturur.<\/p>\nLogstash’i ba\u015flatmadan \u00f6nce yap\u0131land\u0131rma dosyan\u0131z\u0131 test etmek iyi bir uygulamad\u0131r:<\/p>\n
sudo \/opt\/logstash\/bin\/logstash -f \/etc\/logstash\/conf.d\/01-simple-pipeline.conf --configtest\n<\/code><\/pre>\nE\u011fer “Configuration OK” mesaj\u0131n\u0131 g\u00f6r\u00fcrseniz, yap\u0131land\u0131rma dosyan\u0131zda bir s\u00f6zdizimi hatas\u0131 yoktur.<\/p>\n
Elasticsearch’te oldu\u011fu gibi, Logstash’in de Java Heap Size’\u0131 ayarlanabilir. Bu, \/etc\/default\/logstash<\/code> dosyas\u0131nda yap\u0131l\u0131r:<\/p>\nsudo nano \/etc\/default\/logstash\n<\/code><\/pre>\n\u015eu sat\u0131r\u0131 bulun veya ekleyin:<\/p>\n
LS_HEAP_SIZE=\"1g\" # Sunucunuzun RAM'ine g\u00f6re ayarlay\u0131n.\n<\/code><\/pre>\nServisi Ba\u015flatma ve Etkinle\u015ftirme<\/h4>\n
Yap\u0131land\u0131rma ve bellek ayarlar\u0131n\u0131 tamamlad\u0131ktan sonra Logstash servisini ba\u015flat\u0131n ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirin:<\/p>\n
sudo service logstash start\nsudo update-rc.d logstash defaults 95 10\n<\/code><\/pre>\nLogstash’in \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in sistem g\u00fcnl\u00fcklerini kontrol edebilirsiniz:<\/p>\n
sudo tail -f \/var\/log\/logstash\/logstash-plain.log\n<\/code><\/pre>\nAyr\u0131ca, yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131z stdin<\/code> giri\u015fini test etmek i\u00e7in Logstash’i ge\u00e7ici olarak \u00f6n planda \u00e7al\u0131\u015ft\u0131rabilirsiniz:<\/p>\nsudo \/opt\/logstash\/bin\/logstash -f \/etc\/logstash\/conf.d\/01-simple-pipeline.conf\n<\/code><\/pre>\nBu komutu \u00e7al\u0131\u015ft\u0131rd\u0131ktan sonra terminale bir \u015feyler yaz\u0131p Enter’a bast\u0131\u011f\u0131n\u0131zda, Logstash’in bunu i\u015fleyip standart \u00e7\u0131kt\u0131ya ve Elasticsearch’e g\u00f6nderdi\u011fini g\u00f6rmelisiniz.<\/p>\n
Kibana 4.1 Kurulumu<\/h3>\n
Kibana, Elasticsearch’te depolanan verileri ke\u015ffetmek, analiz etmek ve g\u00f6rselle\u015ftirmek i\u00e7in kullan\u0131lan g\u00fc\u00e7l\u00fc bir web aray\u00fcz\u00fcd\u00fcr. Kullan\u0131c\u0131 dostu panolar ve grafikler arac\u0131l\u0131\u011f\u0131yla verilerinizdeki e\u011filimleri ve anormallikleri kolayca g\u00f6rebilirsiniz. Kibana 4.1, Elasticsearch 1.7 ve Logstash 1.5 ile uyumlu bir s\u00fcr\u00fcmd\u00fcr.<\/p>\n
Kurulum Ad\u0131mlar\u0131<\/h4>\n
Kibana, .deb<\/code> paketi olarak de\u011fil, genellikle s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f bir tarball (.tar.gz<\/code>) olarak da\u011f\u0131t\u0131l\u0131r. Bu nedenle manuel kurulum ad\u0131mlar\u0131 gereklidir.<\/p>\n\u00d6ncelikle, Kibana 4.1.2 tarball’\u0131n\u0131 indirin. Bu, 4.1 serisinin son kararl\u0131 s\u00fcr\u00fcm\u00fcd\u00fcr:<\/p>\n
wget https:\/\/download.elastic.co\/kibana\/kibana\/kibana-4.1.2-linux-x64.tar.gz\n<\/code><\/pre>\n\u0130ndirdi\u011finiz dosyay\u0131 a\u00e7\u0131n:<\/p>\n
tar -xvzf kibana-4.1.2-linux-x64.tar.gz\n<\/code><\/pre>\nA\u00e7\u0131lan dizini \/opt<\/code> dizinine ta\u015f\u0131y\u0131n ve daha kolay y\u00f6netim i\u00e7in bir sembolik link olu\u015fturun:<\/p>\nsudo mv kibana-4.1.2-linux-x64 \/opt\/kibana-4.1.2\nsudo ln -s \/opt\/kibana-4.1.2 \/opt\/kibana\n<\/code><\/pre>\nKibana’y\u0131 g\u00fcvenli bir \u015fekilde \u00e7al\u0131\u015ft\u0131rmak i\u00e7in \u00f6zel bir kullan\u0131c\u0131 ve grup olu\u015ftural\u0131m ve gerekli dosya izinlerini ayarlayal\u0131m:<\/p>\n
sudo adduser --system --no-create-home --group kibana\nsudo chown -R kibana:kibana \/opt\/kibana-4.1.2\nsudo chown -R kibana:kibana \/opt\/kibana\n<\/code><\/pre>\nYap\u0131land\u0131rma<\/h4>\n
Kibana’n\u0131n ana yap\u0131land\u0131rma dosyas\u0131 \/opt\/kibana\/config\/kibana.yml<\/code> adresindedir. Bu dosyay\u0131 d\u00fczenleyerek Kibana’n\u0131n Elasticsearch ile nas\u0131l etkile\u015fim kuraca\u011f\u0131n\u0131 ve hangi portta \u00e7al\u0131\u015faca\u011f\u0131n\u0131 belirtebilirsiniz.<\/p>\nsudo nano \/opt\/kibana\/config\/kibana.yml\n<\/code><\/pre>\nA\u015fa\u011f\u0131daki ayarlar\u0131 bulun veya ekleyin:<\/p>\n
\nserver.port<\/code>: Kibana’n\u0131n dinleyece\u011fi porttur. Varsay\u0131lan olarak 5601’dir.<\/li>\nserver.host<\/code>: Kibana’n\u0131n hangi IP adresini dinleyece\u011fini belirtir. Varsay\u0131lan olarak “0.0.0.0” (t\u00fcm aray\u00fczleri dinle) olarak ayarlanm\u0131\u015ft\u0131r, bu da d\u0131\u015far\u0131dan eri\u015fime izin verir. G\u00fcvenlik nedeniyle, yaln\u0131zca belirli bir IP adresini dinlemek veya bir reverse proxy arkas\u0131na koymak daha iyidir.<\/li>\nelasticsearch.url<\/code>: Kibana’n\u0131n ba\u011flanaca\u011f\u0131 Elasticsearch \u00f6rne\u011finin URL’sidir. Varsay\u0131lan olarak “http:\/\/localhost:9200” olarak ayarlanm\u0131\u015ft\u0131r. E\u011fer Elasticsearch ba\u015fka bir sunucuda \u00e7al\u0131\u015f\u0131yorsa veya farkl\u0131 bir port kullan\u0131yorsa, bu de\u011feri g\u00fcncellemeyi unutmay\u0131n.<\/li>\n<\/ul>\n\u00d6rnek yap\u0131land\u0131rma de\u011fi\u015fiklikleri:<\/p>\n
server.port: 5601\nserver.host: \"0.0.0.0\"\nelasticsearch.url: \"http:\/\/localhost:9200\"\n<\/code><\/pre>\nServisi Ba\u015flatma ve Etkinle\u015ftirme<\/h4>\n
Kibana bir tarball olarak kuruldu\u011fu i\u00e7in, sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in bir System V init script’i olu\u015fturmam\u0131z gerekecek. A\u015fa\u011f\u0131daki script’i \/etc\/init.d\/kibana<\/code> olarak kaydedin:<\/p>\nsudo nano \/etc\/init.d\/kibana\n<\/code><\/pre>\n\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
#!\/bin\/bash\n### BEGIN INIT INFO\nProvides: kibana<\/h2>\nRequired-Start: $network $named $remote_fs<\/h2>\nRequired-Stop: $network $named $remote_fs<\/h2>\nDefault-Start: 2 3 4 5<\/h2>\nDefault-Stop: 0 1 6<\/h2>\nShort-Description: Start and stop Kibana<\/h2>\nDescription: Kibana is an open source data visualization platform.<\/h2>\n### END INIT INFO\n\nKibana home directory<\/h2>\nKIBANA_HOME=\"\/opt\/kibana\"\n\nKibana executable<\/h2>\nKIBANA_EXEC=\"$KIBANA_HOME\/bin\/kibana\"\n\nKibana config file<\/h2>\nKIBANA_CONFIG=\"$KIBANA_HOME\/config\/kibana.yml\"\n\nKibana user<\/h2>\nKIBANA_USER=\"kibana\"\n\nLog file<\/h2>\nLOG_FILE=\"\/var\/log\/kibana.log\"\n\nPID file<\/h2>\nPID_FILE=\"\/var\/run\/kibana.pid\"\n\nstart() {\n if [ -f $PID_FILE ] && kill -0 $(cat $PID_FILE) 2>\/dev\/null; then\n echo 'Service already running' >&2\n return 1\n fi\n echo 'Starting service\u2026' >&2\n local CMD=\"$KIBANA_EXEC --config $KIBANA_CONFIG\"\n sudo -u $KIBANA_USER nohup $CMD >> \"$LOG_FILE\" 2>&1 &\n echo $! > \"$PID_FILE\"\n echo 'Service started' >&2\n}\n\nstop() {\n if [ ! -f \"$PID_FILE\" ] || ! kill -0 $(cat \"$PID_FILE\") 2>\/dev\/null; then\n echo 'Service not running' >&2\n return 1\n fi\n echo 'Stopping service\u2026' >&2\n kill -15 $(cat \"$PID_FILE\") && rm -f \"$PID_FILE\"\n echo 'Service stopped' >&2\n}\n\ncase \"$1\" in\n start)\n start\n ;;\n stop)\n stop\n ;;\n restart)\n stop\n start\n ;;\n status)\n if [ -f \"$PID_FILE\" ] && kill -0 $(cat \"$PID_FILE\") 2>\/dev\/null; then\n echo 'Kibana is running'\n exit 0\n else\n echo 'Kibana is not running'\n exit 1\n fi\n ;;\n *)\n echo \"Usage: $0 {start|stop|restart|status}\"\n exit 1\n ;;\nesac\n<\/code><\/pre>\n
Script’i kaydedip kapatt\u0131ktan sonra, \u00e7al\u0131\u015ft\u0131r\u0131labilir hale getirin ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirin:<\/p>\n
sudo chmod +x \/etc\/init.d\/kibana\nsudo update-rc.d kibana defaults\n<\/code><\/pre>\n\u015eimdi Kibana servisini ba\u015flat\u0131n:<\/p>\n
sudo service kibana start\n<\/code><\/pre>\nKibana’n\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in log dosyas\u0131n\u0131 kontrol edebilirsiniz:<\/p>\n
sudo tail -f \/var\/log\/kibana.log\n<\/code><\/pre>\nLoglarda herhangi bir hata olmamal\u0131 ve Kibana’n\u0131n dinleme portunu ba\u015flatt\u0131\u011f\u0131na dair bir mesaj g\u00f6rmelisiniz.<\/p>\n
E\u011fer sunucunuzda bir g\u00fcvenlik duvar\u0131 (UFW gibi) etkinse, Kibana’n\u0131n varsay\u0131lan portu olan 5601’e gelen ba\u011flant\u0131lara izin vermeniz gerekir:<\/p>\n
sudo ufw allow 5601\/tcp\nsudo ufw enable # E\u011fer aktif de\u011filse\n<\/code><\/pre>\nKibana Aray\u00fcz\u00fcne Eri\u015fim<\/h4>\n
T\u00fcm ad\u0131mlar\u0131 ba\u015far\u0131yla tamamlad\u0131ysan\u0131z, web taray\u0131c\u0131n\u0131z\u0131 a\u00e7\u0131n ve sunucunuzun IP adresini veya alan ad\u0131n\u0131 5601 portuyla birlikte kullanarak Kibana aray\u00fcz\u00fcne eri\u015fin:<\/p>\n
http:\/\/sunucu_ip_adresi:5601\n<\/code><\/pre>\nKibana’n\u0131n ho\u015f geldiniz ekran\u0131n\u0131 g\u00f6rmelisiniz. Bu ekranda, Elasticsearch’teki indekslerinizi tan\u0131mlaman\u0131z istenecektir.<\/p>\n
ELK Y\u0131\u011f\u0131n\u0131 Test Etme<\/h3>\n
ELK y\u0131\u011f\u0131n\u0131n\u0131 ba\u015far\u0131yla kurduk. \u015eimdi, her \u015feyin beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in bir test yapal\u0131m.<\/p>\n
Logstash’ten Veri G\u00f6nderme<\/h4>\n
Daha \u00f6nce olu\u015fturdu\u011fumuz basit Logstash yap\u0131land\u0131rma dosyas\u0131n\u0131 kullanarak Elasticsearch’e manuel olarak veri g\u00f6nderelim:<\/p>\n
echo \"Bu bir test mesaj\u0131d\u0131r. ELK y\u0131\u011f\u0131n\u0131 \u00e7al\u0131\u015f\u0131yor!\" | sudo \/opt\/logstash\/bin\/logstash -f \/etc\/logstash\/conf.d\/01-simple-pipeline.conf\n<\/code><\/pre>\nBu komut, “Bu bir test mesaj\u0131d\u0131r. ELK y\u0131\u011f\u0131n\u0131 \u00e7al\u0131\u015f\u0131yor!” metnini Logstash’in standart giri\u015fine g\u00f6nderir. Logstash bu veriyi i\u015fler ve logstash-%{+YYYY.MM.dd}<\/code> format\u0131nda bir indekse Elasticsearch’e g\u00f6nderir.<\/p>\nKibana’da \u0130ndeks Kal\u0131b\u0131 Olu\u015fturma<\/h4>\n
Kibana aray\u00fcz\u00fcne eri\u015fti\u011finizde, muhtemelen bir “Configure an index pattern” ekran\u0131 ile kar\u015f\u0131la\u015facaks\u0131n\u0131z. Buraya, Logstash’in Elasticsearch’e g\u00f6nderdi\u011fi indeks ad\u0131n\u0131 e\u015fle\u015ftirecek bir indeks kal\u0131b\u0131 girmelisiniz. Logstash’in varsay\u0131lan olarak logstash-YYYY.MM.dd<\/code> format\u0131nda indeksler olu\u015fturdu\u011funu hat\u0131rlay\u0131n. Bu nedenle, indeks kal\u0131b\u0131 olarak logstash-*<\/code> girin ve “Create” d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\nKibana, indeks kal\u0131b\u0131n\u0131 analiz ettikten sonra, varsay\u0131lan olarak zaman tabanl\u0131 indeksler i\u00e7in bir “Time-field name” se\u00e7menizi isteyecektir. Logstash’in otomatik olarak ekledi\u011fi @timestamp<\/code> alan\u0131n\u0131 se\u00e7in ve “Create index pattern” d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\nVerileri Ke\u015ffetme<\/h4>\n
\u0130ndeks kal\u0131b\u0131n\u0131 olu\u015fturduktan sonra, Kibana aray\u00fcz\u00fcn\u00fcn sol taraf\u0131ndaki men\u00fcden “Discover” (Ke\u015ffet) sekmesine gidin. Burada, Logstash taraf\u0131ndan Elasticsearch’e g\u00f6nderilen test mesaj\u0131n\u0131z\u0131 ve di\u011fer verileri g\u00f6rmelisiniz. E\u011fer “No results found” (Sonu\u00e7 bulunamad\u0131) mesaj\u0131n\u0131 al\u0131rsan\u0131z, sa\u011f \u00fcst k\u00f6\u015fedeki zaman aral\u0131\u011f\u0131n\u0131 (\u00f6rne\u011fin, “Last 15 minutes” veya “Today”) geni\u015fletmeyi deneyin.<\/p>\n
Verilerinizi ba\u015far\u0131l\u0131 bir \u015fekilde g\u00f6rd\u00fcyseniz, ELK y\u0131\u011f\u0131n\u0131n\u0131z d\u00fczg\u00fcn bir \u015fekilde kurulmu\u015f ve \u00e7al\u0131\u015f\u0131yor demektir!<\/p>\n
Sonu\u00e7 ve Sonraki Ad\u0131mlar<\/h3>\n
Bu kapsaml\u0131 rehberde, Ubuntu 14.04 \u00fczerinde Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1’den olu\u015fan bir ELK y\u0131\u011f\u0131n\u0131n\u0131 ba\u015far\u0131yla kurduk ve temel yap\u0131land\u0131rmalar\u0131n\u0131 ger\u00e7ekle\u015ftirdik. Her bir bile\u015fenin rol\u00fcn\u00fc anlad\u0131k, kurulum ad\u0131mlar\u0131n\u0131 takip ettik ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamalar\u0131n\u0131 sa\u011flad\u0131k. Son olarak, y\u0131\u011f\u0131n\u0131n d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in basit bir test ger\u00e7ekle\u015ftirdik.<\/p>\n
Kurulum tamamlanm\u0131\u015f olsa da, bu sadece ba\u015flang\u0131\u00e7t\u0131r. ELK y\u0131\u011f\u0131n\u0131n\u0131n potansiyelini tam olarak kullanmak i\u00e7in atabilece\u011finiz baz\u0131 sonraki ad\u0131mlar \u015funlard\u0131r:<\/p>\n
\n- Veri Kaynaklar\u0131n\u0131 Entegre Etme:<\/strong> Logstash’i sadece standart giri\u015ften de\u011fil, sunucu g\u00fcnl\u00fck dosyalar\u0131ndan (syslog, Apache\/Nginx eri\u015fim g\u00fcnl\u00fckleri), veritabanlar\u0131ndan, a\u011f ak\u0131\u015flar\u0131ndan veya di\u011fer uygulamalardan veri toplayacak \u015fekilde yap\u0131land\u0131r\u0131n. \u00d6zellikle Filebeat gibi hafif veri toplay\u0131c\u0131lar\u0131 (shipper) kullanarak sunucular\u0131n\u0131zdan Logstash’e g\u00fcvenli ve verimli bir \u015fekilde log g\u00f6nderebilirsiniz.<\/li>\n
- Geli\u015fmi\u015f Logstash Filtreleri:<\/strong> Logstash’in g\u00fc\u00e7l\u00fc filtreleme yeteneklerini kullanarak verilerinizi daha anlaml\u0131 hale getirin. \u00d6rne\u011fin, Grok filtreleri ile yap\u0131land\u0131r\u0131lmam\u0131\u015f log sat\u0131rlar\u0131n\u0131 ayr\u0131\u015ft\u0131rabilir, Mutate filtreleri ile alanlar\u0131 d\u00f6n\u00fc\u015ft\u00fcrebilir veya GeoIP filtreleri ile IP adreslerinden co\u011frafi konum bilgisi \u00e7\u0131karabilirsiniz.<\/li>\n
- Kibana G\u00f6rselle\u015ftirmeleri ve Panolar\u0131:<\/strong> Elasticsearch’teki verilerinizi kullanarak Kibana’da anlaml\u0131 g\u00f6rselle\u015ftirmeler (\u00e7ubuk grafikler, pasta grafikler, haritalar vb.) olu\u015fturun. Bu g\u00f6rselle\u015ftirmeleri bir araya getirerek sisteminizin veya uygulaman\u0131z\u0131n durumunu tek bir bak\u0131\u015fta g\u00f6rebilece\u011finiz interaktif panolar tasarlay\u0131n.<\/li>\n
- G\u00fcvenlik:<\/strong> \u00dcretim ortamlar\u0131nda ELK y\u0131\u011f\u0131n\u0131n\u0131 kullan\u0131rken g\u00fcvenlik kritik \u00f6neme sahiptir. Elasticsearch ve Kibana’ya eri\u015fimi k\u0131s\u0131tlamak i\u00e7in bir ters proxy (Nginx veya Apache) kullanmay\u0131, temel kimlik do\u011frulama eklemeyi veya Elastic’in X-Pack (\u015fimdiki ad\u0131yla Elastic Stack Security) gibi g\u00fcvenlik \u00f6zelliklerini ara\u015ft\u0131rmay\u0131 d\u00fc\u015f\u00fcnebilirsiniz. Ayr\u0131ca, sunucu g\u00fcvenlik duvar\u0131n\u0131z\u0131 (UFW) do\u011fru \u015fekilde yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131zdan emin olun.<\/li>\n
- Performans Optimizasyonu:<\/strong> B\u00fcy\u00fck veri hacimleriyle \u00e7al\u0131\u015f\u0131rken, Elasticsearch’\u00fcn bellek ayarlar\u0131n\u0131, disk I\/O’sunu ve shard yap\u0131land\u0131rmas\u0131n\u0131 optimize etmek \u00f6nemlidir. Logstash’in performans\u0131n\u0131 art\u0131rmak i\u00e7in batch boyutlar\u0131n\u0131 ve i\u015f\u00e7i (worker) say\u0131lar\u0131n\u0131 ayarlayabilirsiniz.<\/li>\n
- Y\u00fckseltme Planlamas\u0131:<\/strong> Bu rehberde eski ELK s\u00fcr\u00fcmleri kullan\u0131lm\u0131\u015f olsa da, yeni s\u00fcr\u00fcmler genellikle \u00f6nemli performans iyile\u015ftirmeleri, yeni \u00f6zellikler ve g\u00fcvenlik yamalar\u0131 sunar. \u0130leride sisteminizi daha yeni ve desteklenen ELK Stack s\u00fcr\u00fcmlerine y\u00fckseltmeyi planlamak \u00f6nemlidir. Ancak, her y\u00fckseltme \u00f6ncesinde uyumluluk kontrollerini ve testleri dikkatlice yapmal\u0131s\u0131n\u0131z.<\/li>\n<\/ul>\n
ELK Y\u0131\u011f\u0131n\u0131, veri analizi ve g\u00f6zlemlenebilirlik alan\u0131nda size geni\u015f imkanlar sunar. Bu rehberle att\u0131\u011f\u0131n\u0131z ilk ad\u0131mla birlikte, sistemlerinizden gelen de\u011ferli i\u00e7g\u00f6r\u00fcleri ke\u015ffetme yolculu\u011funuza ba\u015flam\u0131\u015f oldunuz. Verilerinizi toplad\u0131k\u00e7a, analiz ettik\u00e7e ve g\u00f6rselle\u015ftirdik\u00e7e, sistemlerinizin sa\u011fl\u0131\u011f\u0131 ve performans\u0131 hakk\u0131nda daha derin bir anlay\u0131\u015fa sahip olacaks\u0131n\u0131z.<\/p>\n
<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-34422","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber\" \/>\n<meta property=\"og:description\" content=\"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-16T09:40:52+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber\",\"datePublished\":\"2025-11-16T09:40:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\"},\"wordCount\":2822,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\",\"name\":\"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-16T09:40:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/","og_locale":"tr_TR","og_type":"article","og_title":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber","og_description":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d","og_url":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-16T09:40:52+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"17 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber","datePublished":"2025-11-16T09:40:52+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/"},"wordCount":2822,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/","url":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/","name":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-16T09:40:52+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/elasticsearch-1-7-logstash-1-5-ve-kibana-4-1-elk-yigini-ubuntu-14-04-uzerine-kurulumu-icin-kapsamli-rehber\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Elasticsearch 1.7, Logstash 1.5 ve Kibana 4.1 (ELK Y\u0131\u011f\u0131n\u0131) Ubuntu 14.04 \u00dczerine Kurulumu \u0130\u00e7in Kapsaml\u0131 Rehber"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34422","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=34422"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34422\/revisions"}],"predecessor-version":[{"id":34423,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34422\/revisions\/34423"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=34422"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=34422"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=34422"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}