{"id":34981,"date":"2025-11-24T10:40:52","date_gmt":"2025-11-24T07:40:52","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=34981"},"modified":"2025-11-24T10:40:52","modified_gmt":"2025-11-24T07:40:52","slug":"packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/","title":{"rendered":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?"},"content":{"rendered":"

<\/p>\n

Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?<\/h2>\n

Giri\u015f<\/h2>\n

G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k bilgi i\u015flem ortamlar\u0131nda, altyap\u0131n\u0131n sa\u011fl\u0131\u011f\u0131n\u0131 ve performans\u0131n\u0131 s\u00fcrekli olarak izlemek kritik bir \u00f6neme sahiptir. Sunucular\u0131n, a\u011f cihazlar\u0131n\u0131n ve uygulamalar\u0131n sorunsuz \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flamak, olas\u0131 sorunlar\u0131 proaktif bir \u015fekilde tespit etmek ve performans darbo\u011fazlar\u0131n\u0131 gidermek i\u00e7in kapsaml\u0131 metrik toplama ve analiz yetenekleri vazge\u00e7ilmezdir. Bu ba\u011flamda, Elasticsearch, Logstash ve Kibana’dan olu\u015fan ELK Stack (\u015fimdiki ad\u0131yla Elastic Stack), log y\u00f6netimi ve metrik analizi i\u00e7in end\u00fcstri standard\u0131 haline gelmi\u015ftir. Bu g\u00fc\u00e7l\u00fc \u00fc\u00e7l\u00fcye, \u00f6zellikle a\u011f trafi\u011fi metriklerini toplamak i\u00e7in tasarlanm\u0131\u015f hafif bir veri g\u00f6ndericisi olan Packetbeat entegre edildi\u011finde, altyap\u0131n\u0131z\u0131n a\u011f katman\u0131ndaki g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc \u00f6nemli \u00f6l\u00e7\u00fcde artar.<\/p>\n

Bu makale, Ubuntu 14.04 i\u015fletim sistemi \u00fczerinde Packetbeat ve ELK Stack’i nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. Ubuntu 14.04 eski bir s\u00fcr\u00fcm olmas\u0131na ra\u011fmen, bir\u00e7ok kurulu\u015f hala belirli nedenlerle bu s\u00fcr\u00fcm\u00fc kullanmaya devam etmektedir. Bu nedenle, bu makale, eski sistemlerde bile modern izleme \u00e7\u00f6z\u00fcmlerinin nas\u0131l uygulanabilece\u011fini g\u00f6stermektedir. A\u011f trafi\u011fi, gecikme s\u00fcreleri, protokol analizleri gibi kritik altyap\u0131 metriklerini Packetbeat ile toplay\u0131p, Logstash ile i\u015fleyip, Elasticsearch’te depolay\u0131p ve son olarak Kibana ile g\u00f6rselle\u015ftirerek altyap\u0131n\u0131z hakk\u0131nda derinlemesine bilgi edinmenizi sa\u011flayaca\u011f\u0131z.<\/p>\n

ELK Stack Bile\u015fenleri ve Rolleri<\/h2>\n

ELK Stack, her biri belirli bir g\u00f6revi yerine getiren ve birlikte g\u00fc\u00e7l\u00fc bir veri analiz platformu olu\u015fturan \u00fc\u00e7 ana bile\u015fenden olu\u015fur:<\/p>\n

Elasticsearch: Veri Depolama ve Arama Motoru<\/h3>\n

Elasticsearch, da\u011f\u0131t\u0131lm\u0131\u015f, RESTful bir arama ve analiz motorudur. B\u00fcy\u00fck hacimli verileri neredeyse ger\u00e7ek zamanl\u0131 olarak depolamak, aramak ve analiz etmek i\u00e7in tasarlanm\u0131\u015ft\u0131r. \u00d6l\u00e7eklenebilirli\u011fi ve h\u0131z\u0131 sayesinde, loglar, metrikler ve di\u011fer zaman tabanl\u0131 veriler i\u00e7in ideal bir depolama \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Metriklerinizi indeksleyerek, h\u0131zl\u0131 sorgulama ve karma\u015f\u0131k analizler yapman\u0131z\u0131 sa\u011flar.<\/p>\n

Logstash: Veri Toplama, \u0130\u015fleme ve Zenginle\u015ftirme Boru Hatt\u0131<\/h3>\n

Logstash, \u00e7e\u015fitli kaynaklardan veri toplayan, bu verileri i\u015fleyen ve ard\u0131ndan se\u00e7ti\u011finiz bir hedefe (genellikle Elasticsearch) g\u00f6nderen bir sunucu taraf\u0131 veri i\u015fleme boru hatt\u0131d\u0131r. \u00c7e\u015fitli giri\u015f (input) eklentileri sayesinde log dosyalar\u0131, sistem olaylar\u0131, a\u011f ak\u0131\u015flar\u0131 gibi farkl\u0131 t\u00fcrdeki verileri alabilir. Filtre (filter) eklentileri ile veriyi ayr\u0131\u015ft\u0131rabilir, d\u00f6n\u00fc\u015ft\u00fcrebilir, zenginle\u015ftirebilir ve anonimle\u015ftirebilir. \u00c7\u0131k\u0131\u015f (output) eklentileri ile i\u015flenmi\u015f veriyi Elasticsearch’e, Kafka’ya veya ba\u015fka bir hedefe y\u00f6nlendirebilir. Packetbeat’ten gelen verileri al\u0131p Elasticsearch’e g\u00f6ndermek i\u00e7in Logstash’i kullanmak, veriler \u00fczerinde daha fazla kontrol ve i\u015fleme yetene\u011fi sa\u011flar.<\/p>\n

Kibana: Veri G\u00f6rselle\u015ftirme ve Kontrol Paneli<\/h3>\n

Kibana, Elasticsearch’te depolanan veriler i\u00e7in web tabanl\u0131 bir g\u00f6rselle\u015ftirme arac\u0131d\u0131r. Kullan\u0131c\u0131lar\u0131n verileri ke\u015ffetmelerini, g\u00f6rselle\u015ftirmeler olu\u015fturmalar\u0131n\u0131 (grafikler, tablolar, haritalar) ve bu g\u00f6rselle\u015ftirmeleri interaktif kontrol panellerinde bir araya getirmelerini sa\u011flar. Altyap\u0131 metriklerini anla\u015f\u0131l\u0131r grafikler ve panolar halinde sunarak, sistem performans\u0131n\u0131 anl\u0131k olarak izlemenize, trendleri g\u00f6rmenize ve anormallikleri h\u0131zla tespit etmenize olanak tan\u0131r.<\/p>\n

Packetbeat: A\u011f Metrikleri Toplama<\/h3>\n

Packetbeat, Elastic Stack’in bir par\u00e7as\u0131 olan, sunuculara y\u00fcklenen hafif bir veri g\u00f6ndericisidir (shipper). A\u011f aray\u00fczlerindeki trafi\u011fi dinleyerek, protokolleri (HTTP, MySQL, PostgreSQL, Redis, MongoDB, DNS, TLS vb.) analiz eder ve bu protokollerin performans metriklerini (gecikme s\u00fcreleri, i\u015flem s\u00fcreleri, hata oranlar\u0131) toplar. Toplad\u0131\u011f\u0131 bu verileri do\u011frudan Elasticsearch’e veya Logstash \u00fczerinden Elasticsearch’e g\u00f6nderir. Packetbeat, altyap\u0131n\u0131zdaki a\u011f ileti\u015fimini, uygulama katman\u0131 performans\u0131n\u0131 ve potansiyel a\u011f sorunlar\u0131n\u0131 anlamak i\u00e7in paha bi\u00e7ilmez bilgiler sa\u011flar.<\/p>\n

Sistem Gereksinimleri ve \u00d6n Haz\u0131rl\u0131k<\/h2>\n

Ubuntu 14.04 \u00fczerinde bu kurulumu ger\u00e7ekle\u015ftirmek i\u00e7in a\u015fa\u011f\u0131daki \u00f6n ko\u015fullar\u0131n kar\u015f\u0131land\u0131\u011f\u0131ndan emin olun:<\/p>\n

* \u0130\u015fletim Sistemi:<\/strong> Ubuntu 14.04 LTS (64-bit).
\n* Donan\u0131m:<\/strong> En az 4GB RAM ve 2 CPU \u00e7ekirde\u011fi \u00f6nerilir. Disk alan\u0131, toplayaca\u011f\u0131n\u0131z veri miktar\u0131na g\u00f6re de\u011fi\u015fir; ba\u015flang\u0131\u00e7 i\u00e7in en az 20GB bo\u015f alan idealdir.
\n* A\u011f Ba\u011flant\u0131s\u0131:<\/strong> \u0130nternet eri\u015fimi (paket indirme i\u00e7in) ve ELK bile\u015fenlerinin birbirleriyle ve Packetbeat ile ileti\u015fim kurabilmesi i\u00e7in gerekli a\u011f portlar\u0131n\u0131n a\u00e7\u0131k olmas\u0131.
\n* Root Yetkisi:<\/strong> T\u00fcm kurulum ve yap\u0131land\u0131rma ad\u0131mlar\u0131 i\u00e7in sudo<\/code> yetkisine sahip bir kullan\u0131c\u0131 veya root<\/code> kullan\u0131c\u0131s\u0131.<\/p>\n

Java Geli\u015ftirme Kiti (JDK) Kurulumu<\/h3>\n

Elasticsearch ve Logstash’in \u00e7al\u0131\u015fmas\u0131 i\u00e7in Java gereklidir. Ubuntu 14.04 i\u00e7in OpenJDK 8 \u00f6nerilir.<\/p>\n

sudo apt-get update\nsudo apt-get install openjdk-8-jdk -y<\/code><\/pre>\n
Kurulumun ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in:<\/p>\n
java -version<\/code><\/pre>\n
\u00c7\u0131kt\u0131da “openjdk version 1.8.x” benzeri bir ifade g\u00f6rmelisiniz.<\/p>\n
Elastic Stack Deposu ve GPG Anahtar\u0131 Ekleme<\/h3>\n
Elastic Stack bile\u015fenlerini kolayca kurmak ve g\u00fcncellemek i\u00e7in Elastic’in APT deposunu sisteminize eklemeniz gerekir.<\/p>\n
wget -qO - https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch | sudo apt-key add -\necho \"deb https:\/\/artifacts.elastic.co\/packages\/5.x\/apt stable main\" | sudo tee -a \/etc\/apt\/sources.list.d\/elastic-5.x.list\nsudo apt-get update<\/code><\/pre>\n
Burada 5.x s\u00fcr\u00fcm\u00fcn\u00fc kulland\u0131k, \u00e7\u00fcnk\u00fc Ubuntu 14.04 i\u00e7in en uyumlu ve yayg\u0131n kullan\u0131lan s\u00fcr\u00fcmlerden biriydi. Daha yeni s\u00fcr\u00fcmler (6.x, 7.x) daha yeni i\u015fletim sistemi ba\u011f\u0131ml\u0131l\u0131klar\u0131na sahip olabilir.<\/p>\n
G\u00fcvenlik Duvar\u0131 Ayarlar\u0131 (UFW)<\/h3>\n
E\u011fer bir g\u00fcvenlik duvar\u0131 kullan\u0131yorsan\u0131z (\u00f6rne\u011fin UFW), ELK bile\u015fenlerinin ve Packetbeat’in ileti\u015fim kurabilmesi i\u00e7in gerekli portlar\u0131 a\u00e7man\u0131z gerekecektir:<\/p>\n
*   Elasticsearch:<\/strong> 9200 (HTTP API), 9300 (Node to Node ileti\u015fim)
\n*   Logstash:<\/strong> 5044 (Beats input i\u00e7in)
\n*   Kibana:<\/strong> 5601 (Web aray\u00fcz\u00fc)<\/p>\n
sudo ufw allow 9200\/tcp\nsudo ufw allow 9300\/tcp\nsudo ufw allow 5044\/tcp\nsudo ufw allow 5601\/tcp\nsudo ufw enable # E\u011fer g\u00fcvenlik duvar\u0131 kapal\u0131ysa etkinle\u015ftirin\nsudo ufw status<\/code><\/pre>\n
ELK Stack Kurulumu<\/h2>\n
\u015eimdi ELK Stack bile\u015fenlerini kurmaya ba\u015flayabiliriz.<\/p>\n
Elasticsearch Kurulumu<\/h3>\n
Elasticsearch’\u00fc daha \u00f6nce ekledi\u011fimiz depodan kurabiliriz.<\/p>\n
sudo apt-get install elasticsearch -y<\/code><\/pre>\n
Yap\u0131land\u0131rma:<\/strong>
\nElasticsearch’\u00fcn temel yap\u0131land\u0131rmas\u0131 \/etc\/elasticsearch\/elasticsearch.yml<\/code> dosyas\u0131nda yap\u0131l\u0131r. Minimum olarak, Elasticsearch’\u00fcn hangi IP adresinden dinleyece\u011fini belirtmemiz gerekir. Tek sunuculu bir kurulum i\u00e7in localhost<\/code> veya sunucunun \u00f6zel IP adresini kullanabilirsiniz.<\/p>\n
sudo nano \/etc\/elasticsearch\/elasticsearch.yml<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131rlar\u0131 bulun veya ekleyin:<\/p>\n
# ---------------------------------- Network -----------------------------------\n
Set the bind address to a specific IP (IPv4 or IPv6):<\/h2>\nnetwork.host: 0.0.0.0 # T\u00fcm aray\u00fczlerden eri\u015fime izin verir, g\u00fcvenlik i\u00e7in belirli bir IP adresi kullan\u0131n\n
network.host: localhost # Sadece yerel eri\u015fim i\u00e7in<\/h2>\n
# Set a custom port for HTTP:<\/h2>\nhttp.port: 9200\n
# For more information, consult the network module documentation.<\/h2>\n
# --------------------------------- Discovery ----------------------------------<\/h2>\n
# Pass an initial list of hosts to perform discovery on:<\/h2>\n
The default list of hosts is [\"127.0.0.1\", \"[::1]\"]<\/h2>\n
discovery.zen.ping.unicast.hosts: [\"host1\", \"host2\"]<\/code><\/pre>\n<\/h2>\n
network.host: 0.0.0.0<\/code> ayar\u0131, Elasticsearch’\u00fcn t\u00fcm a\u011f aray\u00fczlerinden eri\u015filebilir olmas\u0131n\u0131 sa\u011flar. \u00dcretim ortamlar\u0131nda, g\u00fcvenlik i\u00e7in belirli bir IP adresine veya localhost<\/code>‘a k\u0131s\u0131tlaman\u0131z \u00f6nerilir.<\/p>\n
Servisi Ba\u015flatma ve Otomatik Ba\u015flatma:<\/strong>
\nElasticsearch servisini ba\u015flat\u0131n ve sistem ba\u015flang\u0131c\u0131nda otomatik ba\u015flamas\u0131 i\u00e7in ayarlay\u0131n.<\/p>\n
sudo systemctl daemon-reload # systemd tabanl\u0131 sistemler i\u00e7in (Ubuntu 14.04 upstart kullan\u0131r)\nsudo service elasticsearch start\nsudo update-rc.d elasticsearch defaults # Upstart tabanl\u0131 sistemler i\u00e7in otomatik ba\u015flatma<\/code><\/pre>\n
Elasticsearch’\u00fcn \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in:<\/p>\n
curl -X GET 'http:\/\/localhost:9200'<\/code><\/pre>\n
Ba\u015far\u0131l\u0131 bir kurulumda, Elasticsearch’\u00fcn s\u00fcr\u00fcm\u00fcn\u00fc ve cluster bilgilerini i\u00e7eren bir JSON yan\u0131t\u0131 almal\u0131s\u0131n\u0131z.<\/p>\n
Logstash Kurulumu<\/h3>\n
Logstash’i daha \u00f6nce ekledi\u011fimiz depodan kurabiliriz.<\/p>\n
sudo apt-get install logstash -y<\/code><\/pre>\n
Yap\u0131land\u0131rma:<\/strong>
\nLogstash’in yap\u0131land\u0131rma dosyalar\u0131 \/etc\/logstash\/conf.d\/<\/code> dizininde bulunur. Packetbeat’ten gelen verileri dinlemek ve Elasticsearch’e g\u00f6ndermek i\u00e7in bir yap\u0131land\u0131rma dosyas\u0131 olu\u015fturaca\u011f\u0131z.<\/p>\n
sudo nano \/etc\/logstash\/conf.d\/02-beats-input.conf<\/code><\/pre>\n
\u0130\u00e7eri\u011fi:<\/p>\n
input {\n  beats {\n    port => 5044\n    ssl => false # \u00dcretimde SSL kullan\u0131lmas\u0131 \u015fiddetle tavsiye edilir\n  }\n}<\/code><\/pre>\n
Ard\u0131ndan, Elasticsearch’e \u00e7\u0131kt\u0131 g\u00f6ndermek i\u00e7in ba\u015fka bir dosya olu\u015ftural\u0131m:<\/p>\n
sudo nano \/etc\/logstash\/conf.d\/30-elasticsearch-output.conf<\/code><\/pre>\n
\u0130\u00e7eri\u011fi:<\/p>\n
output {\n  elasticsearch {\n    hosts => [\"localhost:9200\"]\n    manage_template => false # Packetbeat kendi template'ini y\u00fckleyecek\n    index => \"%{[@metadata][beat]}-%{+YYYY.MM.dd}\"\n    document_type => \"%{[@metadata][type]}\" # Eski Logstash\/Elasticsearch s\u00fcr\u00fcmleri i\u00e7in gerekli olabilir\n  }\n}<\/code><\/pre>\n
Bu yap\u0131land\u0131rma, Logstash’in 5044 portunda Packetbeat’ten gelen ba\u011flant\u0131lar\u0131 dinlemesini ve verileri packetbeat-YYYY.MM.dd<\/code> format\u0131nda Elasticsearch’e g\u00f6ndermesini sa\u011flar.<\/p>\n
Servisi Ba\u015flatma ve Otomatik Ba\u015flatma:<\/strong>
\nLogstash servisini ba\u015flat\u0131n ve otomatik ba\u015flamas\u0131 i\u00e7in ayarlay\u0131n.<\/p>\n
sudo service logstash start\nsudo update-rc.d logstash defaults<\/code><\/pre>\n
Logstash’in do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in loglar\u0131n\u0131 kontrol edebilirsiniz:<\/p>\n
sudo tail -f \/var\/log\/logstash\/logstash-plain.log<\/code><\/pre>\n
Kibana Kurulumu<\/h3>\n
Kibana’y\u0131 da depodan kolayca kurabiliriz.<\/p>\n
sudo apt-get install kibana -y<\/code><\/pre>\n
Yap\u0131land\u0131rma:<\/strong>
\nKibana’n\u0131n yap\u0131land\u0131rma dosyas\u0131 \/etc\/kibana\/kibana.yml<\/code>‘dir. Kibana’n\u0131n hangi IP adresinden dinleyece\u011fini ve hangi Elasticsearch \u00f6rne\u011fine ba\u011flanaca\u011f\u0131n\u0131 belirtmemiz gerekir.<\/p>\n
sudo nano \/etc\/kibana\/kibana.yml<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131rlar\u0131 bulun veya ekleyin:<\/p>\n
# The port to bind to for incoming HTTP requests.\nserver.port: 5601\n\n
The host to bind to for incoming HTTP requests.<\/h2>\nserver.host: \"0.0.0.0\" # T\u00fcm aray\u00fczlerden eri\u015fime izin verir, g\u00fcvenlik i\u00e7in belirli bir IP adresi kullan\u0131n\n
server.host: \"localhost\" # Sadece yerel eri\u015fim i\u00e7in<\/h2>\n\n
The URL of the Elasticsearch instance to use for all your queries.<\/h2>\nelasticsearch.url: \"http:\/\/localhost:9200\"\n\n
Kibana uses an index in Elasticsearch to store saved objects such as<\/h2>\n
dashboards, visualizations, and saved searches. Kibana creates a new index<\/h2>\n
if the index doesn't already exist.<\/h2>\nkibana.index: \".kibana\"<\/code><\/pre>\n
server.host: \"0.0.0.0\"<\/code> ayar\u0131, Kibana’n\u0131n t\u00fcm a\u011f aray\u00fczlerinden eri\u015filebilir olmas\u0131n\u0131 sa\u011flar. \u00dcretim ortamlar\u0131nda, g\u00fcvenlik i\u00e7in belirli bir IP adresine k\u0131s\u0131tlaman\u0131z veya bir ters proxy (Nginx, Apache) arkas\u0131na koyman\u0131z \u00f6nerilir.<\/p>\n
Servisi Ba\u015flatma ve Otomatik Ba\u015flatma:<\/strong>
\nKibana servisini ba\u015flat\u0131n ve otomatik ba\u015flamas\u0131 i\u00e7in ayarlay\u0131n.<\/p>\n
sudo service kibana start\nsudo update-rc.d kibana defaults<\/code><\/pre>\n
Kibana’n\u0131n \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in, web taray\u0131c\u0131n\u0131zdan http:\/\/:5601<\/code> adresine gidin. Kibana aray\u00fcz\u00fcn\u00fc g\u00f6rmelisiniz.<\/p>\n
Packetbeat Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n
ELK Stack haz\u0131r oldu\u011funa g\u00f6re, \u015fimdi Packetbeat’i kurup yap\u0131land\u0131rabiliriz.<\/p>\n
Packetbeat Kurulumu<\/h3>\n
Packetbeat, Elastic Stack’in bir par\u00e7as\u0131 oldu\u011fu i\u00e7in, daha \u00f6nce ekledi\u011fimiz Elastic deposundan kurulabilir.<\/p>\n
sudo apt-get install packetbeat -y<\/code><\/pre>\n
Packetbeat Yap\u0131land\u0131rmas\u0131<\/h3>\n
Packetbeat’in ana yap\u0131land\u0131rma dosyas\u0131 \/etc\/packetbeat\/packetbeat.yml<\/code>‘dir. Bu dosyay\u0131 d\u00fczenleyerek hangi a\u011f aray\u00fczlerini dinleyece\u011fini, hangi protokolleri analiz edece\u011fini ve verileri nereye g\u00f6nderece\u011fini belirleyece\u011fiz.<\/p>\n
sudo nano \/etc\/packetbeat\/packetbeat.yml<\/code><\/pre>\n
1. A\u011f Aray\u00fczleri:<\/strong>
\nPacketbeat’in hangi a\u011f aray\u00fczlerini dinlemesini istedi\u011finizi belirtin. Genellikle any<\/code> (t\u00fcm aray\u00fczler) veya belirli bir aray\u00fcz ad\u0131 (\u00f6rne\u011fin eth0<\/code>) kullan\u0131l\u0131r.<\/p>\n
# Select the network interfaces to sniff the traffic from. You can specify\n
the name of the interface \"eth0\", \"en0\", \"lo\", \"any\". Or you can specify<\/h2>\n
the address \"192.168.1.20\".<\/h2>\ninterfaces:\n  - device: any # T\u00fcm aray\u00fczleri dinle\n    # type: pcap\n    # snapshot_length: 65535\n    # buffer_size_mb: 100\n    # timeout: 0s\n    # bpf_filter: \"tcp or udp\" # Sadece TCP ve UDP paketlerini yakala<\/code><\/pre>\n
2. Protokoller:<\/strong>
\nPacketbeat’in analiz etmesini istedi\u011finiz protokolleri etkinle\u015ftirin. Varsay\u0131lan olarak baz\u0131lar\u0131 etkin gelir. \u0130htiya\u00e7lar\u0131n\u0131za g\u00f6re ekleme veya \u00e7\u0131karma yapabilirsiniz.<\/p>\n
# List of the protocols that should be enabled.\nprotocols:\n- type: http\n  ports: [80, 8080, 8000, 5000, 8002] # HTTP trafi\u011fi i\u00e7in portlar\n- type: mysql\n  ports: [3306]\n- type: postgresql\n  ports: [5432]\n- type: redis\n  ports: [6379]\n- type: mongodb\n  ports: [27017]\n- type: dns\n  ports: [53]\n- type: tls\n  ports: [443, 993, 995, 585, 8443, 9243] # TLS\/SSL trafi\u011fi i\u00e7in portlar\n
... Di\u011fer protokoller ...<\/code><\/pre>\n<\/h2>\n
3. \u00c7\u0131kt\u0131 (Output) Yap\u0131land\u0131rmas\u0131:<\/strong>
\nPacketbeat’in verileri Logstash’e g\u00f6ndermesini sa\u011flay\u0131n. Bu, Logstash’in veri i\u015fleme yeteneklerinden faydalanman\u0131z\u0131 sa\u011flar.<\/p>\n
# ---------------------------- Logstash Output -----------------------------\noutput.logstash:\n  # The Logstash hosts\n  hosts: [\"localhost:5044\"] # Logstash sunucunuzun IP adresi ve Beats input portu\n\n  # Optional SSL. By default is off.\n  # List of root certificates for SSL\/TLS verification\n  #ssl.certificate_authorities: [\"\/etc\/pki\/root\/ca.pem\"]\n\n  # Certificate for SSL client authentication\n  #ssl.certificate: \"\/etc\/pki\/client\/cert.pem\"\n\n  # Client Certificate Key\n  #ssl.key: \"\/etc\/pki\/client\/cert.key\"\n\n
---------------------------- Elasticsearch Output ------------------------<\/h2>\n
output.elasticsearch:<\/h2>\n  # Array of hosts to connect to.\n  # hosts: [\"localhost:9200\"]\n  # protocol: \"http\"\n  # username: \"elastic\"\n  # password: \"changeme\"<\/code><\/pre>\n
output.logstash<\/code> b\u00f6l\u00fcm\u00fcn\u00fc etkinle\u015ftirin ve hosts<\/code> de\u011ferini Logstash sunucunuzun IP adresi ve Beats input portu ile g\u00fcncelleyin. E\u011fer Packetbeat ve Logstash ayn\u0131 sunucudaysa, localhost:5044<\/code> kullanabilirsiniz. output.elasticsearch<\/code> b\u00f6l\u00fcm\u00fcn\u00fc yorum sat\u0131r\u0131 yaparak devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/p>\n
4. Kibana Panolar\u0131 ve Dizin \u015eablonu (Index Template) Y\u00fckleme:<\/strong>
\nPacketbeat, Kibana’da kullan\u0131ma haz\u0131r panolar ve Elasticsearch i\u00e7in dizin \u015fablonlar\u0131 i\u00e7erir. Bunlar\u0131 otomatik olarak y\u00fcklemek i\u00e7in setup.kibana<\/code> ve setup.template<\/code> ayarlar\u0131n\u0131 kullan\u0131n.<\/p>\n
# =============================== Kibana ===============================\nsetup.kibana:\n  # Kibana host is used to ensure the dashboards are created in the Kibana instance.\n  host: \"localhost:5601\" # Kibana sunucunuzun adresi\n\n
=============================== Dashboards ===============================<\/h2>\n
These settings allow to load the dashboards to Kibana.<\/h2>\nsetup.dashboards:\n  # The URL of the Elasticsearch instance to use for loading the dashboards.\n  # This is only needed if Kibana is not connected to the same Elasticsearch\n  # as Packetbeat.\n  # hosts: [\"localhost:9200\"]\n  # The username and password for connecting to Elasticsearch\n  # username: \"elastic\"\n  # password: \"changeme\"\n  # If you use a different index pattern than 'packetbeat-*' you need to adjust this.\n  # index: \"packetbeat-*\"\n\n
=============================== Index Template ===============================<\/h2>\n
These settings allow to load the index template to Elasticsearch.<\/h2>\nsetup.template:\n  # The URL of the Elasticsearch instance to use for loading the template.\n  # This is only needed if Packetbeat is not connected to the same Elasticsearch\n  # as Kibana.\n  # hosts: [\"localhost:9200\"]\n  # The username and password for connecting to Elasticsearch\n  # username: \"elastic\"\n  # password: \"changeme\"\n  # If you use a different index pattern than 'packetbeat-*' you need to adjust this.\n  # name: \"packetbeat\"\n  # pattern: \"packetbeat-*\"\n  # The path to the index template file.\n  # path: \"\/etc\/packetbeat\/packetbeat.template.json\"<\/code><\/pre>\n
setup.kibana.host<\/code> de\u011ferini Kibana sunucunuzun IP adresi ve portu ile g\u00fcncelleyin.<\/p>\n
5. Dizin \u015eablonunu ve Panolar\u0131 Y\u00fckleme:<\/strong>
\nYap\u0131land\u0131rma dosyas\u0131n\u0131 kaydettikten sonra, Packetbeat’in dizin \u015fablonunu Elasticsearch’e ve \u00f6rnek panolar\u0131 Kibana’ya y\u00fcklemesini sa\u011flay\u0131n.<\/p>\n
sudo packetbeat setup --template -E output.logstash.enabled=false -E output.elasticsearch.hosts=['localhost:9200']\nsudo packetbeat setup --dashboards -E output.logstash.enabled=false -E output.elasticsearch.hosts=['localhost:9200']<\/code><\/pre>\n
Bu komutlar, Packetbeat’in do\u011frudan Elasticsearch’e ba\u011flanarak \u015fablonlar\u0131 ve panolar\u0131 y\u00fcklemesini sa\u011flar. Normalde Packetbeat veriyi Logstash’e g\u00f6nderirken, bu setup<\/code> komutlar\u0131 i\u00e7in ge\u00e7ici olarak do\u011frudan Elasticsearch’e ba\u011flanmas\u0131 gerekir.<\/p>\n
Servisi Ba\u015flatma ve Otomatik Ba\u015flatma:<\/strong>
\nPacketbeat servisini ba\u015flat\u0131n ve sistem ba\u015flang\u0131c\u0131nda otomatik ba\u015flamas\u0131 i\u00e7in ayarlay\u0131n.<\/p>\n
sudo service packetbeat start\nsudo update-rc.d packetbeat defaults<\/code><\/pre>\n
Test Etme:<\/strong>
\nPacketbeat’in do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan ve veri g\u00f6nderdi\u011finden emin olmak i\u00e7in:
\n1.  Packetbeat loglar\u0131n\u0131 kontrol edin:<\/p>\n
sudo tail -f \/var\/log\/packetbeat\/packetbeat<\/code><\/pre>\n
    Burada herhangi bir hata mesaj\u0131 g\u00f6rmemelisiniz.
\n2.  Elasticsearch’te yeni dizinlerin olu\u015fup olu\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin:<\/p>\n
curl -X GET 'http:\/\/localhost:9200\/_cat\/indices?v'<\/code><\/pre>\n
    packetbeat-YYYY.MM.dd<\/code> format\u0131nda dizinler g\u00f6rmelisiniz.
\n3.  Kibana’ya gidin ve packetbeat-*<\/code> index pattern’ini olu\u015fturun.<\/p>\n
Verilerin Kibana’da G\u00f6rselle\u015ftirilmesi<\/h2>\n
Packetbeat verileri Elasticsearch’e akmaya ba\u015flad\u0131\u011f\u0131nda, bu verileri Kibana’da g\u00f6rselle\u015ftirmeye ba\u015flayabiliriz.<\/p>\n
1.  Kibana Aray\u00fcz\u00fcne Eri\u015fim:<\/strong> Web taray\u0131c\u0131n\u0131zdan http:\/\/:5601<\/code> adresine gidin.
\n2.  Index Pattern Olu\u015fturma:<\/strong>
\n    *   Kibana’n\u0131n sol gezinme men\u00fcs\u00fcnden “Management” (Y\u00f6netim) b\u00f6l\u00fcm\u00fcne t\u0131klay\u0131n.
\n    *   “Index Patterns” (Dizin Desenleri) se\u00e7ene\u011fini se\u00e7in.
\n    *   “Create Index Pattern” (Dizin Deseni Olu\u015ftur) d\u00fc\u011fmesine t\u0131klay\u0131n.
\n       “Index pattern” alan\u0131na packetbeat-<\/em><\/code> yaz\u0131n ve “Next step” (Sonraki ad\u0131m) d\u00fc\u011fmesine t\u0131klay\u0131n.
\n    *   “Time Filter field name” (Zaman Filtresi Alan Ad\u0131) olarak @timestamp<\/code>‘i se\u00e7in ve “Create index pattern” (Dizin deseni olu\u015ftur) d\u00fc\u011fmesine t\u0131klay\u0131n.
\n3.  \u00d6nceden Y\u00fcklenmi\u015f Panolar\u0131 Kullanma:<\/strong>
\n    *   Sol gezinme men\u00fcs\u00fcnden “Dashboards” (Panolar) b\u00f6l\u00fcm\u00fcne t\u0131klay\u0131n.
\n    *   Packetbeat kurulumu s\u0131ras\u0131nda y\u00fckledi\u011fimiz panolar\u0131 burada g\u00f6rmelisiniz (\u00f6rne\u011fin, “[Packetbeat] Overview”). Bu panolara t\u0131klayarak a\u011f metriklerinizi g\u00f6rselle\u015ftirmeye ba\u015flayabilirsiniz. HTTP trafi\u011fi, DNS sorgular\u0131, MySQL i\u015flemleri gibi bir\u00e7ok farkl\u0131 metrik t\u00fcr\u00fcn\u00fc burada bulabilirsiniz.
\n4.  \u00d6zel G\u00f6rselle\u015ftirmeler ve Panolar Olu\u015fturma:<\/strong>
\n    *   “Visualize” (G\u00f6rselle\u015ftir) veya “Dashboard” (Pano) b\u00f6l\u00fcmlerini kullanarak kendi \u00f6zel grafiklerinizi ve panolar\u0131n\u0131z\u0131 olu\u015fturabilirsiniz. \u00d6rne\u011fin, en \u00e7ok a\u011f trafi\u011fi olu\u015fturan IP adreslerini g\u00f6steren bir \u00e7ubuk grafik, belirli bir uygulaman\u0131n gecikme s\u00fcrelerini g\u00f6steren bir \u00e7izgi grafik veya belirli bir protokoldeki hata oranlar\u0131n\u0131 g\u00f6steren bir g\u00f6sterge paneli olu\u015fturabilirsiniz.<\/p>\n
\u00d6nemli Hususlar ve En \u0130yi Uygulamalar<\/h2>\n
Performans ve Kaynak T\u00fcketimi<\/h3>\n
*   Packetbeat:<\/strong> A\u011f trafi\u011finin yo\u011funlu\u011funa ba\u011fl\u0131 olarak CPU ve RAM t\u00fcketimi artabilir. Y\u00fcksek trafikli ortamlarda, bpf_filter<\/code> kullanarak sadece ilgilendi\u011finiz trafi\u011fi yakalamak, snapshot_length<\/code> de\u011ferini optimize etmek ve buffer_size_mb<\/code> de\u011ferini ayarlamak performans\u0131 art\u0131rabilir.
\n*   Elasticsearch:<\/strong> Disk I\/O, RAM ve CPU yo\u011fun bir uygulamad\u0131r. Yeterli kaynak tahsis edildi\u011finden emin olun. \u00d6zellikle disk performans\u0131 \u00f6nemlidir. SSD kullan\u0131lmas\u0131 \u015fiddetle tavsiye edilir. JVM heap boyutunu sunucunun RAM’inin %50’sine (ancak 31GB’\u0131 ge\u00e7meyecek \u015fekilde) ayarlamak performans\u0131 optimize eder.
\n*   Veri Saklama Politikalar\u0131:<\/strong> Ubuntu 14.04 ve ELK 5.x ortam\u0131nda Index Lifecycle Management (ILM) \u00f6zelli\u011fi mevcut de\u011fildir. Bu nedenle, disk alan\u0131 dolmas\u0131n\u0131 \u00f6nlemek i\u00e7in eski dizinleri manuel olarak veya curator<\/code> gibi ara\u00e7larla d\u00fczenli olarak silmeniz veya ar\u015fivlemeniz gerekecektir.<\/p>\n
G\u00fcvenlik<\/h3>\n
*   A\u011f G\u00fcvenli\u011fi:<\/strong> T\u00fcm ELK bile\u015fenlerinin ve Packetbeat’in \u00e7al\u0131\u015ft\u0131\u011f\u0131 sunucularda g\u00fcvenlik duvar\u0131 (UFW) kullanarak sadece gerekli portlar\u0131n a\u00e7\u0131ld\u0131\u011f\u0131ndan emin olun. \u00d6zellikle Kibana ve Elasticsearch’e d\u0131\u015far\u0131dan eri\u015fimi k\u0131s\u0131tlay\u0131n.
\n*   Eri\u015fim Kontrol\u00fc:<\/strong> ELK 5.x s\u00fcr\u00fcm\u00fcnde X-Pack (\u015fimdi Elastic Stack Security) \u00fccretli bir eklentiydi. E\u011fer g\u00fcvenlik \u00f6zellikleri gerekiyorsa, a\u00e7\u0131k kaynakl\u0131 alternatifler (\u00f6rne\u011fin Search Guard) veya daha yeni s\u00fcr\u00fcmlerdeki temel g\u00fcvenlik \u00f6zelliklerini de\u011ferlendirmeniz gerekebilir. En az\u0131ndan Kibana’y\u0131 bir ters proxy (Nginx, Apache) arkas\u0131na koyarak temel HTTP kimlik do\u011frulamas\u0131 ekleyebilirsiniz.
\n*   SSL\/TLS:<\/strong> Logstash ve Packetbeat aras\u0131ndaki ileti\u015fimi SSL\/TLS ile \u015fifrelemek, verilerin aktar\u0131m\u0131 s\u0131ras\u0131nda g\u00fcvenli\u011fi art\u0131r\u0131r. \u00dcretim ortamlar\u0131nda bu \u015fiddetle tavsiye edilir.<\/p>\n
\u00d6l\u00e7eklenebilirlik<\/h3>\n
*   Bu kurulum tek bir sunucu \u00fczerinde yap\u0131lm\u0131\u015ft\u0131r. Daha b\u00fcy\u00fck ortamlar i\u00e7in ELK bile\u015fenlerini ayr\u0131 sunuculara da\u011f\u0131tman\u0131z gerekebilir. Elasticsearch’\u00fc bir k\u00fcme olarak, Logstash’i birden fazla \u00f6rnek olarak ve Kibana’y\u0131 ayr\u0131 bir sunucuda \u00e7al\u0131\u015ft\u0131rmak daha iyi performans ve y\u00fcksek eri\u015filebilirlik sa\u011flar.
\n*   Logstash, veri i\u015fleme boru hatt\u0131nda bir darbo\u011faz haline gelebilir. Filtrelerinizi optimize edin ve gerekirse birden fazla Logstash \u00f6rne\u011fi \u00e7al\u0131\u015ft\u0131r\u0131n.<\/p>\n
Ubuntu 14.04 S\u0131n\u0131rlamalar\u0131<\/h3>\n
*   Ubuntu 14.04, uzun zaman \u00f6nce destek sonuna ula\u015fm\u0131\u015f eski bir i\u015fletim sistemidir. G\u00fcvenlik g\u00fcncellemeleri almamaktad\u0131r. \u00dcretim ortamlar\u0131nda kullan\u0131lmas\u0131 tavsiye edilmez. Bu makaledeki ad\u0131mlar bu eski platformda bile ELK’nin nas\u0131l kurulabilece\u011fini g\u00f6stermekle birlikte, m\u00fcmk\u00fcnse daha yeni ve desteklenen bir Ubuntu s\u00fcr\u00fcm\u00fcne (\u00f6rne\u011fin 20.04 LTS veya 22.04 LTS) ge\u00e7i\u015f yapman\u0131z \u015fiddetle \u00f6nerilir.
\n*   Eski ELK s\u00fcr\u00fcmleri (5.x gibi), modern s\u00fcr\u00fcmlerde bulunan bir\u00e7ok geli\u015fmi\u015f \u00f6zelli\u011fe (ILM, Machine Learning, geli\u015fmi\u015f g\u00fcvenlik vb.) sahip de\u011fildir.<\/p>\n
Sorun Giderme<\/h2>\n
Kurulum veya yap\u0131land\u0131rma s\u0131ras\u0131nda sorunlarla kar\u015f\u0131la\u015f\u0131rsan\u0131z, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyerek sorunlar\u0131 gidermeye \u00e7al\u0131\u015f\u0131n:<\/p>\n
1.  Log Dosyalar\u0131n\u0131 Kontrol Edin:<\/strong>
\n       Elasticsearch: \/var\/log\/elasticsearch\/<\/em>.log<\/code>
\n    *   Logstash: \/var\/log\/logstash\/logstash-plain.log<\/code>
\n    *   Kibana: \/var\/log\/kibana\/kibana.stderr<\/code> (veya syslog<\/code>)
\n    *   Packetbeat: \/var\/log\/packetbeat\/packetbeat<\/code>
\n    Bu log dosyalar\u0131, hatan\u0131n kayna\u011f\u0131 hakk\u0131nda \u00f6nemli ipu\u00e7lar\u0131 sa\u011flar.
\n2.  Servis Durumlar\u0131n\u0131 Kontrol Edin:<\/strong><\/p>\n
sudo service elasticsearch status\n    sudo service logstash status\n    sudo service kibana status\n    sudo service packetbeat status<\/code><\/pre>\n
    Her servisin running<\/code> durumda oldu\u011fundan emin olun.
\n3.  A\u011f Ba\u011flant\u0131lar\u0131n\u0131 Kontrol Edin:<\/strong>
\n    netstat<\/code> veya ss<\/code> komutlar\u0131n\u0131 kullanarak portlar\u0131n dinlenip dinlenmedi\u011fini kontrol edin:<\/p>\n
sudo netstat -tulnp | grep 9200\n    sudo netstat -tulnp | grep 5044\n    sudo netstat -tulnp | grep 5601<\/code><\/pre>\n
    Gerekirse ping<\/code> ve telnet<\/code> (veya nc<\/code>) kullanarak bile\u015fenler aras\u0131ndaki ba\u011flant\u0131y\u0131 test edin.
\n4.  Yap\u0131land\u0131rma Dosyalar\u0131n\u0131 G\u00f6zden Ge\u00e7irin:<\/strong> T\u00fcm .yml<\/code> ve .conf<\/code> dosyalar\u0131n\u0131 dikkatlice kontrol edin. YAML dosyalar\u0131nda girintileme hatalar\u0131 veya yaz\u0131m yanl\u0131\u015flar\u0131 yayg\u0131n sorunlard\u0131r.
\n5.  Packetbeat Yap\u0131land\u0131rmas\u0131n\u0131 Test Edin:<\/strong><\/p>\n
sudo packetbeat test config -c \/etc\/packetbeat\/packetbeat.yml -e\n    sudo packetbeat test output -c \/etc\/packetbeat\/packetbeat.yml -e<\/code><\/pre>\n
    Bu komutlar yap\u0131land\u0131rma dosyas\u0131n\u0131n ve \u00e7\u0131kt\u0131 hedeflerinin do\u011fru olup olmad\u0131\u011f\u0131n\u0131 kontrol eder.<\/p>\n
Sonu\u00e7<\/h2>\n
Bu makalede, Ubuntu 14.04 \u00fczerinde Packetbeat ve ELK Stack’i (Elasticsearch, Logstash, Kibana) kurarak altyap\u0131 metriklerini nas\u0131l toplayaca\u011f\u0131n\u0131z\u0131 ve g\u00f6rselle\u015ftirece\u011finizi ad\u0131m ad\u0131m \u00f6\u011frendiniz. Packetbeat, a\u011f katman\u0131ndaki kritik bilgileri (protokol performans\u0131, gecikmeler, trafik ak\u0131\u015flar\u0131) toplayarak altyap\u0131n\u0131z\u0131n sa\u011fl\u0131\u011f\u0131 ve performans\u0131 hakk\u0131nda derinlemesine g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flar. Logstash, bu verileri i\u015fleyerek Elasticsearch’e g\u00f6nderirken, Elasticsearch verileri depolay\u0131p indeksler ve Kibana ise bu verileri interaktif panolar arac\u0131l\u0131\u011f\u0131yla anla\u015f\u0131l\u0131r bir \u015fekilde sunar.<\/p>\n
Bu \u00e7\u00f6z\u00fcm, altyap\u0131n\u0131zdaki a\u011f sorunlar\u0131n\u0131 proaktif bir \u015fekilde tespit etmenize, performans darbo\u011fazlar\u0131n\u0131 belirlemenize ve genel sistem sa\u011fl\u0131\u011f\u0131n\u0131 iyile\u015ftirmenize olanak tan\u0131r. Her ne kadar Ubuntu 14.04 eski bir i\u015fletim sistemi olsa da, bu kurulum size modern izleme ara\u00e7lar\u0131n\u0131n temel prensiplerini ve uygulamalar\u0131n\u0131 g\u00f6stermi\u015ftir. Ancak, uzun vadeli g\u00fcvenlik ve geli\u015fmi\u015f \u00f6zellikler i\u00e7in sistemlerinizi desteklenen ve g\u00fcncel i\u015fletim sistemi s\u00fcr\u00fcmlerine y\u00fckseltmeniz \u015fiddetle tavsiye edilir. Bu sayede, Elastic Stack’in en yeni \u00f6zelliklerinden ve g\u00fcvenlik g\u00fcncellemelerinden tam olarak faydalanabilirsiniz.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k bilgi i\u015flem ortamlar\u0131nda,","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-34981","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nPacketbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?\" \/>\n<meta property=\"og:description\" content=\"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r? Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k bilgi i\u015flem ortamlar\u0131nda,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-24T07:40:52+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?\",\"datePublished\":\"2025-11-24T07:40:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\"},\"wordCount\":2752,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\",\"name\":\"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-24T07:40:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/","og_locale":"tr_TR","og_type":"article","og_title":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?","og_description":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r? Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k bilgi i\u015flem ortamlar\u0131nda,","og_url":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-24T07:40:52+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"19 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?","datePublished":"2025-11-24T07:40:52+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/"},"wordCount":2752,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/","url":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/","name":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-24T07:40:52+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/packetbeat-ve-elk-kullanarak-ubuntu-14-04-uzerinde-altyapi-metrikleri-nasil-toplanir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Packetbeat ve ELK Kullanarak Ubuntu 14.04 \u00dczerinde Altyap\u0131 Metrikleri Nas\u0131l Toplan\u0131r?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=34981"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34981\/revisions"}],"predecessor-version":[{"id":34982,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34981\/revisions\/34982"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=34981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=34981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=34981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}