{"id":37628,"date":"2026-01-11T01:41:26","date_gmt":"2026-01-10T22:41:26","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=37628"},"modified":"2026-01-11T01:41:26","modified_gmt":"2026-01-10T22:41:26","slug":"altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/","title":{"rendered":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)"},"content":{"rendered":"

<\/p>\n

Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)<\/h2>\n

Modern altyap\u0131larda sistemlerin ve uygulamalar\u0131n sa\u011fl\u0131\u011f\u0131n\u0131, performans\u0131n\u0131 ve g\u00fcvenli\u011fini s\u00fcrekli olarak izlemek kritik \u00f6neme sahiptir. A\u011f trafi\u011fi, bu izleme s\u00fcrecinin temel ta\u015flar\u0131ndan biridir; zira a\u011f \u00fczerinden ge\u00e7en veriler, sistemler aras\u0131 ileti\u015fimi, olas\u0131 performans darbo\u011fazlar\u0131n\u0131, g\u00fcvenlik ihlallerini ve uygulama davran\u0131\u015flar\u0131n\u0131 anlamak i\u00e7in paha bi\u00e7ilmez bilgiler sunar. Bu rehberde, hafif ve g\u00fc\u00e7l\u00fc bir a\u011f paket analizcisi olan Packetbeat’i kullanarak Ubuntu 16.04 sunucular\u0131ndan altyap\u0131 metriklerini nas\u0131l toplayaca\u011f\u0131m\u0131z\u0131 ve bu verileri pop\u00fcler ELK (Elasticsearch, Logstash, Kibana) y\u0131\u011f\u0131n\u0131 ile nas\u0131l depolay\u0131p g\u00f6rselle\u015ftirece\u011fimizi ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n

Packetbeat, a\u011f aray\u00fczlerini dinleyerek belirli protokoller \u00fczerindeki trafi\u011fi analiz eder ve bu verileri yap\u0131land\u0131r\u0131lm\u0131\u015f bir formatta Elasticsearch’e g\u00f6nderir. HTTP, DNS, TLS, MySQL, PostgreSQL gibi bir\u00e7ok uygulama protokol\u00fcn\u00fc destekler. ELK y\u0131\u011f\u0131n\u0131 ise bu verileri merkezi bir depoda saklaman\u0131za, g\u00fc\u00e7l\u00fc sorgularla analiz etmenize ve Kibana’n\u0131n zengin g\u00f6rselle\u015ftirme yetenekleriyle anlaml\u0131 panolar olu\u015fturman\u0131za olanak tan\u0131r. Bu sayede, a\u011f\u0131n\u0131zda neler olup bitti\u011fini ger\u00e7ek zamanl\u0131 olarak takip edebilir, sorunlar\u0131 proaktif olarak tespit edebilir ve altyap\u0131n\u0131z\u0131n genel sa\u011fl\u0131\u011f\u0131 hakk\u0131nda derinlemesine bilgi edinebilirsiniz.<\/p>\n

Bu rehber, Ubuntu 16.04 \u00fczerinde ELK y\u0131\u011f\u0131n\u0131n\u0131 kurmay\u0131 ve ard\u0131ndan Packetbeat’i yap\u0131land\u0131rarak a\u011f metriklerini toplamay\u0131 ve Kibana \u00fczerinde g\u00f6rselle\u015ftirmeyi hedefler.<\/p>\n

ELK Stack Kurulumu (Elasticsearch ve Kibana)<\/h3>\n

ELK Stack’in temel bile\u015fenleri olan Elasticsearch ve Kibana’y\u0131, Packetbeat verilerini depolamak ve g\u00f6rselle\u015ftirmek i\u00e7in kuraca\u011f\u0131z. Ubuntu 16.04’te kurulum ad\u0131mlar\u0131 \u015funlard\u0131r.<\/p>\n

\u00d6n Gereksinimler<\/h4>\n

Elasticsearch’\u00fcn \u00e7al\u0131\u015fmas\u0131 i\u00e7in Java Runtime Environment (JRE) gereklidir. OpenJDK’y\u0131 kurarak ba\u015flayabiliriz:<\/p>\n

sudo apt update\nsudo apt install openjdk-8-jre-headless -y\n<\/code><\/pre>\n
Elasticsearch Kurulumu<\/h4>\n
Elasticsearch’\u00fc kurmak i\u00e7in Elastic’in APT deposunu sistemimize eklememiz gerekiyor.<\/p>\n
1.  Elastic GPG anahtar\u0131n\u0131 ekleyin:<\/strong><\/p>\n
wget -qO - https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch | sudo apt-key add -\n<\/code><\/pre>\n
2.  Elastic deposunu ekleyin:<\/strong><\/p>\n
echo \"deb https:\/\/artifacts.elastic.co\/packages\/5.x\/apt stable main\" | sudo tee -a \/etc\/apt\/sources.list.d\/elastic-5.x.list\n<\/code><\/pre>\n
    Not: Ubuntu 16.04 i\u00e7in Elastic Stack’in 5.x veya 6.x s\u00fcr\u00fcmleri genellikle daha uyumludur. Bu rehberde 5.x reposunu kullanaca\u011f\u0131z.<\/em><\/p>\n
3.  Depo listesini g\u00fcncelleyin ve Elasticsearch’\u00fc kurun:<\/strong><\/p>\n
sudo apt update\nsudo apt install elasticsearch -y\n<\/code><\/pre>\n
4.  Elasticsearch yap\u0131land\u0131rmas\u0131 (\/etc\/elasticsearch\/elasticsearch.yml<\/code>):<\/strong>
\n    Temel bir yap\u0131land\u0131rma i\u00e7in, \u00f6zellikle tek d\u00fc\u011f\u00fcml\u00fc bir kurulumda, network.host<\/code> ayar\u0131n\u0131 yapman\u0131z yeterlidir. Bu, Elasticsearch’\u00fcn hangi IP adresinden eri\u015filebilir olaca\u011f\u0131n\u0131 belirler.<\/p>\n
# \/etc\/elasticsearch\/elasticsearch.yml\n\n
A\u011f ayarlar\u0131<\/h2>\nnetwork.host: 0.0.0.0 # T\u00fcm aray\u00fczlerden eri\u015fime izin verir, \u00fcretimde belirli bir IP ile s\u0131n\u0131rlay\u0131n\nhttp.port: 9200\n<\/code><\/pre>\n
    De\u011fi\u015fiklikleri kaydedin ve Elasticsearch servisini ba\u015flat\u0131p etkinle\u015ftirin:<\/p>\n
sudo systemctl start elasticsearch\nsudo systemctl enable elasticsearch\n<\/code><\/pre>\n
5.  Durumu kontrol edin:<\/strong><\/p>\n
curl -X GET 'http:\/\/localhost:9200'\n<\/code><\/pre>\n
    \u00c7\u0131kt\u0131da cluster_name<\/code>, name<\/code> ve tagline<\/code> gibi bilgiler g\u00f6rmelisiniz.<\/p>\n
Kibana Kurulumu<\/h4>\n
Kibana, Elasticsearch’teki verileri g\u00f6rselle\u015ftirmek i\u00e7in kullan\u0131lan aray\u00fczd\u00fcr.<\/p>\n
1.  Kibana’y\u0131 kurun:<\/strong>
\n    Elastic GPG anahtar\u0131 ve deposu zaten ekli oldu\u011fu i\u00e7in do\u011frudan kurulum yapabiliriz:<\/p>\n
sudo apt install kibana -y\n<\/code><\/pre>\n
2.  Kibana yap\u0131land\u0131rmas\u0131 (\/etc\/kibana\/kibana.yml<\/code>):<\/strong>
\n    Kibana’n\u0131n hangi IP adresinden eri\u015filebilir olaca\u011f\u0131n\u0131 ve hangi Elasticsearch \u00f6rne\u011fine ba\u011flanaca\u011f\u0131n\u0131 yap\u0131land\u0131r\u0131n.<\/p>\n
# \/etc\/kibana\/kibana.yml\n\n
Kibana sunucu ayarlar\u0131<\/h2>\nserver.port: 5601\nserver.host: \"0.0.0.0\" # T\u00fcm aray\u00fczlerden eri\u015fime izin verir\nserver.name: \"your-kibana-server\"\n\n
Elasticsearch ayarlar\u0131<\/h2>\nelasticsearch.url: \"http:\/\/localhost:9200\" # Elasticsearch sunucunuzun IP'si\n<\/code><\/pre>\n
    De\u011fi\u015fiklikleri kaydedin ve Kibana servisini ba\u015flat\u0131p etkinle\u015ftirin:<\/p>\n
sudo systemctl start kibana\nsudo systemctl enable kibana\n<\/code><\/pre>\n
3.  Firewall ayarlar\u0131 (UFW):<\/strong>
\n    E\u011fer UFW kullan\u0131yorsan\u0131z, Elasticsearch (9200) ve Kibana (5601) portlar\u0131na d\u0131\u015far\u0131dan eri\u015fime izin vermeniz gerekebilir:<\/p>\n
sudo ufw allow 9200\/tcp\nsudo ufw allow 5601\/tcp\nsudo ufw enable\n<\/code><\/pre>\n
Art\u0131k bir web taray\u0131c\u0131s\u0131 \u00fczerinden http:\/\/:5601<\/code> adresine giderek Kibana aray\u00fcz\u00fcne eri\u015febilirsiniz.<\/p>\n
Packetbeat Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h3>\n
\u015eimdi s\u0131ra, a\u011f metriklerini toplayacak olan Packetbeat’i kurmaya geldi. Packetbeat’i, izlemek istedi\u011finiz sunucuya (bu rehberde Ubuntu 16.04) kurmal\u0131s\u0131n\u0131z.<\/p>\n
Packetbeat Kurulumu<\/h4>\n
Packetbeat de Elastic Stack’in bir par\u00e7as\u0131 oldu\u011fu i\u00e7in, daha \u00f6nce ekledi\u011fimiz Elastic deposunu kullanabiliriz.<\/p>\n
1.  Packetbeat’i kurun:<\/strong><\/p>\n
sudo apt update\nsudo apt install packetbeat -y\n<\/code><\/pre>\n
Packetbeat Yap\u0131land\u0131rmas\u0131<\/h4>\n
Packetbeat’in yap\u0131land\u0131rma dosyas\u0131 \/etc\/packetbeat\/packetbeat.yml<\/code> konumundad\u0131r. Bu dosyada Packetbeat’in hangi a\u011f aray\u00fczlerini dinleyece\u011fini, hangi protokolleri analiz edece\u011fini ve verileri nereye g\u00f6nderece\u011fini belirtiriz.<\/p>\n
1.  Yap\u0131land\u0131rma dosyas\u0131n\u0131 d\u00fczenleyin:<\/strong><\/p>\n
sudo nano \/etc\/packetbeat\/packetbeat.yml\n<\/code><\/pre>\n
2.  Temel yap\u0131land\u0131rma:<\/strong>
\n    A\u015fa\u011f\u0131daki \u00f6nemli b\u00f6l\u00fcmleri dikkatlice yap\u0131land\u0131rmam\u0131z gerekiyor:<\/p>\n
    *   packetbeat.interfaces<\/code><\/strong>: Packetbeat’in hangi a\u011f aray\u00fcz\u00fcn\u00fc dinleyece\u011fini veya t\u00fcm aray\u00fczleri dinlemesini sa\u011flar. device: any<\/code> t\u00fcm aray\u00fczleri dinler.<\/p>\n
# \/etc\/packetbeat\/packetbeat.yml\n\n
A\u011f aray\u00fczleri<\/h2>\npacketbeat.interfaces:\n  - device: any # T\u00fcm aray\u00fczleri dinle\n    # snapshot_length: 1514 # Opsiyonel: Paketlerin ne kadar\u0131n\u0131n yakalanaca\u011f\u0131n\u0131 belirler\n    # type: af_packet # Linux i\u00e7in \u00f6nerilen yakalama mekanizmas\u0131\n<\/code><\/pre>\n
    *   packetbeat.protocols<\/code><\/strong>: Packetbeat’in analiz edece\u011fi protokolleri etkinle\u015ftirin. Bu k\u0131s\u0131m, toplamak istedi\u011finiz metriklerin t\u00fcr\u00fcn\u00fc do\u011frudan etkiler. \u00d6rne\u011fin, HTTP istek s\u00fcrelerini, DNS sorgu tiplerini veya MySQL sorgu gecikmelerini izleyebilirsiniz.<\/p>\n
# HTTP protokol\u00fcn\u00fc etkinle\u015ftir\npacketbeat.protocols.http:\n  ports: [80, 8080, 8000, 5000, 8002] # \u0130zlenecek HTTP portlar\u0131\n\n
DNS protokol\u00fcn\u00fc etkinle\u015ftir<\/h2>\npacketbeat.protocols.dns:\n  ports: [53]\n\n
TLS\/SSL protokol\u00fcn\u00fc etkinle\u015ftir (HTTPS i\u00e7in)<\/h2>\npacketbeat.protocols.tls:\n  ports: [443]\n\n
MySQL protokol\u00fcn\u00fc etkinle\u015ftir<\/h2>\n
packetbeat.protocols.mysql:<\/h2>\n
ports: [3306]<\/h2>\n\n
PostgreSQL protokol\u00fcn\u00fc etkinle\u015ftir<\/h2>\n
packetbeat.protocols.pgsql:<\/h2>\n
ports: [5432]<\/h2>\n\n
Redis protokol\u00fcn\u00fc etkinle\u015ftir<\/h2>\n
packetbeat.protocols.redis:<\/h2>\n
ports: [6379]<\/h2>\n<\/code><\/pre>\n
        \u0130htiya\u00e7lar\u0131n\u0131za g\u00f6re di\u011fer protokolleri de etkinle\u015ftirebilirsiniz. Her protokol i\u00e7in ports<\/code> ayar\u0131n\u0131 dikkatlice kontrol edin.<\/p>\n
    *   output.elasticsearch<\/code><\/strong>: Verilerin g\u00f6nderilece\u011fi Elasticsearch sunucusunun adresi.<\/p>\n
# \u00c7\u0131kt\u0131 ayarlar\u0131: Verileri Elasticsearch'e g\u00f6nder\noutput.elasticsearch:\n  hosts: [\":9200\"] # Elasticsearch sunucunuzun IP'si\n  # username: \"elastic\" # E\u011fer Elasticsearch'te kimlik do\u011frulama etkinse\n  # password: \"changeme\"\n<\/code><\/pre>\n
        ELASTICSEARCH_IP_ADRESI<\/code> yerine Elasticsearch sunucunuzun ger\u00e7ek IP adresini yaz\u0131n.<\/p>\n
    *   setup.kibana<\/code><\/strong>: Packetbeat’in \u00f6nceden tan\u0131mlanm\u0131\u015f Kibana panolar\u0131n\u0131 ve indeks \u015fablonlar\u0131n\u0131 y\u00fckleyebilmesi i\u00e7in Kibana sunucusunun adresi.<\/p>\n
# Kibana ayarlar\u0131: Panolar\u0131 y\u00fcklemek i\u00e7in\nsetup.kibana:\n  host: \":5601\" # Kibana sunucunuzun IP'si\n  # username: \"kibana_system\" # E\u011fer Kibana'da kimlik do\u011frulama etkinse\n  # password: \"changeme\"\n<\/code><\/pre>\n
        KIBANA_IP_ADRESI<\/code> yerine Kibana sunucunuzun ger\u00e7ek IP adresini yaz\u0131n.<\/p>\n
    *   setup.template.settings<\/code><\/strong>: K\u00fc\u00e7\u00fck \u00f6l\u00e7ekli kurulumlar i\u00e7in indeks \u015fard say\u0131s\u0131n\u0131 ayarlamak faydal\u0131 olabilir.<\/p>\n
# \u0130ndeks \u015fablonu ayarlar\u0131\nsetup.template.settings:\n  index.number_of_shards: 1\n  # index.codec: best_compression\n<\/code><\/pre>\n
3.  Yap\u0131land\u0131rmay\u0131 test edin:<\/strong><\/p>\n
sudo packetbeat test config -e\nsudo packetbeat test output\n<\/code><\/pre>\n
    Her iki komut da herhangi bir hata d\u00f6nd\u00fcrmemeli ve ba\u015far\u0131yla tamamland\u0131\u011f\u0131n\u0131 belirtmelidir.<\/p>\n
4.  Packetbeat’i ba\u015flat\u0131n ve etkinle\u015ftirin:<\/strong><\/p>\n
sudo systemctl start packetbeat\nsudo systemctl enable packetbeat\n<\/code><\/pre>\n
Packetbeat art\u0131k a\u011f trafi\u011fini yakal\u0131yor ve yap\u0131land\u0131r\u0131lan protokollere g\u00f6re analiz ederek verileri Elasticsearch’e g\u00f6nderiyor olmal\u0131d\u0131r.<\/p>\n
Verilerin G\u00f6rselle\u015ftirilmesi<\/h3>\n
Packetbeat verileri Elasticsearch’e akmaya ba\u015flad\u0131ktan sonra, bu verileri Kibana’da ke\u015ffetmek ve g\u00f6rselle\u015ftirmek i\u00e7in ad\u0131mlar atmam\u0131z gerekiyor.<\/p>\n
Kibana’da \u0130ndeks \u015eablonlar\u0131n\u0131 ve Panolar\u0131 Y\u00fckleme<\/h4>\n
Packetbeat, Kibana i\u00e7in \u00f6nceden tan\u0131mlanm\u0131\u015f indeks \u015fablonlar\u0131, ingest pipeline’lar\u0131 ve panolarla birlikte gelir. Bunlar\u0131 y\u00fcklemek, ba\u015flang\u0131\u00e7 i\u00e7in b\u00fcy\u00fck kolayl\u0131k sa\u011flar. Bu i\u015flemi Packetbeat’in kurulu oldu\u011fu sunucudan veya Kibana’ya eri\u015fimi olan herhangi bir sunucudan yapabilirsiniz:<\/p>\n
sudo packetbeat setup -e\n<\/code><\/pre>\n
Bu komut, Packetbeat’in Elasticsearch’e indeks \u015fablonunu ve Kibana’ya \u00f6rnek panolar\u0131 y\u00fcklemesini sa\u011flar. setup<\/code> komutunun ba\u015far\u0131yla tamamland\u0131\u011f\u0131n\u0131 g\u00f6rmelisiniz.<\/p>\n
Kibana Aray\u00fcz\u00fcnde Ke\u015fif<\/h4>\n
1.  Kibana’ya eri\u015fin:<\/strong> Bir web taray\u0131c\u0131s\u0131 a\u00e7\u0131n ve http:\/\/:5601<\/code> adresine gidin.<\/p>\n
2.  \u0130ndeks deseni olu\u015fturma:<\/strong> Sol men\u00fcden “Management” (Y\u00f6netim) -> “Index Patterns” (\u0130ndeks Desenleri) b\u00f6l\u00fcm\u00fcne gidin. E\u011fer packetbeat setup<\/code> komutunu \u00e7al\u0131\u015ft\u0131rd\u0131ysan\u0131z, packetbeat-<\/code> deseni zaten olu\u015fturulmu\u015f olabilir. E\u011fer de\u011filse, packetbeat-<\/em><\/code> yaz\u0131p olu\u015fturun ve zaman damgas\u0131 alan\u0131 olarak @timestamp<\/code>‘\u0131 se\u00e7in.<\/p>\n
3.  Verileri ke\u015ffedin:<\/strong> Sol men\u00fcden “Discover” (Ke\u015ffet) b\u00f6l\u00fcm\u00fcne gidin. Burada Packetbeat taraf\u0131ndan toplanan ham verileri g\u00f6rebilirsiniz. Zaman aral\u0131\u011f\u0131n\u0131 sa\u011f \u00fcst k\u00f6\u015feden “Last 15 minutes” (Son 15 dakika) veya “Last 1 hour” (Son 1 saat) olarak ayarlayarak en g\u00fcncel verilere odaklanabilirsiniz. Gelen verilerde http.request.method<\/code>, dns.question.name<\/code>, tls.server.subject_cn<\/code> gibi alanlar\u0131 g\u00f6rmelisiniz.<\/p>\n
\u00d6nceden Tan\u0131mlanm\u0131\u015f Panolar\u0131 Kullanma<\/h4>\n
packetbeat setup<\/code> komutu ile y\u00fcklenen panolar\u0131 kullanmaya ba\u015flayabilirsiniz.<\/p>\n
1.  Panolara eri\u015fim:<\/strong> Sol men\u00fcden “Dashboard” (Pano) b\u00f6l\u00fcm\u00fcne gidin.
\n2.  Packetbeat panolar\u0131n\u0131 se\u00e7in:<\/strong> Arama kutusuna “Packetbeat” yazarak Packetbeat’e \u00f6zel panolar\u0131 filtreleyebilirsiniz. \u00d6rne\u011fin, “Packetbeat Overview” veya “Packetbeat HTTP” panolar\u0131n\u0131 a\u00e7arak a\u011f trafi\u011finiz hakk\u0131nda genel bir bak\u0131\u015f veya HTTP trafi\u011finizin detayl\u0131 analizini g\u00f6rebilirsiniz. Bu panolar, a\u011fdaki en \u00e7ok konu\u015fanlar\u0131, HTTP yan\u0131t s\u00fcrelerini, DNS sorgu oranlar\u0131n\u0131 ve daha bir\u00e7ok metrikleri haz\u0131r bir \u015fekilde sunar.<\/p>\n
\u00d6zel G\u00f6rselle\u015ftirmeler Olu\u015fturma<\/h4>\n
Kibana’n\u0131n “Visualize” (G\u00f6rselle\u015ftir) veya “Lens” (Mercek) ara\u00e7lar\u0131n\u0131 kullanarak kendi \u00f6zel g\u00f6rselle\u015ftirmelerinizi ve panolar\u0131n\u0131z\u0131 olu\u015fturabilirsiniz.<\/p>\n
1.  Yeni bir g\u00f6rselle\u015ftirme olu\u015fturma:<\/strong> Sol men\u00fcden “Visualize” b\u00f6l\u00fcm\u00fcne gidin ve “Create new visualization” (Yeni g\u00f6rselle\u015ftirme olu\u015ftur) d\u00fc\u011fmesine t\u0131klay\u0131n.
\n2.  \u00d6rnek: HTTP yan\u0131t s\u00fcrelerini g\u00f6steren bir \u00e7ubuk grafik:<\/strong>
\n    *   Bir “Vertical Bar” (Dikey \u00c7ubuk) grafik t\u00fcr\u00fc se\u00e7in.
\n    *   Y-ekseni (Metrics) i\u00e7in “Average” (Ortalama) agregasyonu ile http.response.time.ns<\/code> alan\u0131n\u0131 se\u00e7in (nanosaniye cinsinden yan\u0131t s\u00fcresi).
\n    *   X-ekseni (Buckets) i\u00e7in “Terms” (Terimler) agregasyonu ile http.request.method<\/code> veya http.response.status_code<\/code> gibi bir alan se\u00e7ebilirsiniz.
\n    *   Bu, hangi HTTP metodlar\u0131n\u0131n veya durum kodlar\u0131n\u0131n ortalama olarak ne kadar yan\u0131t s\u00fcresi ald\u0131\u011f\u0131n\u0131 g\u00f6sterecektir.
\n3.  G\u00f6rselle\u015ftirmeyi kaydet ve panoya ekle:<\/strong> Olu\u015fturdu\u011funuz g\u00f6rselle\u015ftirmeyi kaydedin ve mevcut bir Packetbeat panosuna ekleyebilir veya yeni bir \u00f6zel pano olu\u015fturabilirsiniz.<\/p>\n
Bu sayede, altyap\u0131n\u0131zdaki a\u011f metriklerini derinlemesine inceleyebilir, performans sorunlar\u0131n\u0131 h\u0131zla tespit edebilir ve a\u011f trafi\u011finizin davran\u0131\u015f\u0131n\u0131 anlayabilirsiniz.<\/p>\n
Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n
Bu rehberde, Ubuntu 16.04 \u00fczerinde Packetbeat ve ELK Stack’i kullanarak altyap\u0131 metriklerini nas\u0131l toplayaca\u011f\u0131n\u0131z\u0131, depolayaca\u011f\u0131n\u0131z\u0131 ve g\u00f6rselle\u015ftirece\u011finizi \u00f6\u011frendiniz. Packetbeat, a\u011f seviyesinde derinlemesine g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flayarak, uygulamalar\u0131n\u0131z\u0131n ve servislerinizin ger\u00e7ek zamanl\u0131 performans\u0131n\u0131 izlemenize olanak tan\u0131r. ELK Stack ile birle\u015fti\u011finde, bu verileri merkezi bir konumda toplayarak, g\u00fc\u00e7l\u00fc analizler yapabilir ve Kibana’n\u0131n zengin g\u00f6rselle\u015ftirme yetenekleriyle anlaml\u0131 panolar olu\u015fturarak karar verme s\u00fcre\u00e7lerinizi destekleyebilirsiniz. Bu kurulum, a\u011f sorunlar\u0131n\u0131 gidermek, g\u00fcvenlik tehditlerini tespit etmek ve genel sistem sa\u011fl\u0131\u011f\u0131n\u0131 proaktif olarak y\u00f6netmek i\u00e7in sa\u011flam bir temel sunar.<\/p>\n
S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h4>\n
1. Packetbeat hangi protokolleri izleyebilir?<\/strong>
\nPacketbeat, HTTP, HTTPS (TLS), DNS, MySQL, PostgreSQL, Redis, MongoDB, ICMP ve daha bir\u00e7ok yayg\u0131n uygulama protokol\u00fcn\u00fc izleyebilir. Yap\u0131land\u0131rma dosyas\u0131nda (packetbeat.yml<\/code>) istedi\u011finiz protokolleri etkinle\u015ftirerek izleme kapsam\u0131n\u0131 geni\u015fletebilirsiniz.<\/p>\n
2. Packetbeat’i sadece belirli bir a\u011f aray\u00fcz\u00fcnde \u00e7al\u0131\u015ft\u0131rabilir miyim?<\/strong>
\nEvet, packetbeat.interfaces<\/code> b\u00f6l\u00fcm\u00fcnde device: any<\/code> yerine belirli bir a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131n\u0131 (\u00f6rne\u011fin, device: eth0<\/code>) belirterek Packetbeat’i yaln\u0131zca o aray\u00fczde \u00e7al\u0131\u015ft\u0131rabilirsiniz.<\/p>\n
3. Veriler Elasticsearch’e ula\u015fm\u0131yorsa ne yapmal\u0131y\u0131m?<\/strong>
\n*   Packetbeat servisi \u00e7al\u0131\u015f\u0131yor mu kontrol edin: sudo systemctl status packetbeat<\/code>.
\n*   Packetbeat yap\u0131land\u0131rma dosyas\u0131n\u0131 (\/etc\/packetbeat\/packetbeat.yml<\/code>) kontrol edin, \u00f6zellikle output.elasticsearch<\/code> b\u00f6l\u00fcm\u00fcndeki Elasticsearch IP adresi ve portunun do\u011fru oldu\u011fundan emin olun.
\n*   Elasticsearch sunucusunun \u00e7al\u0131\u015f\u0131r durumda oldu\u011fundan ve 9200 portunun a\u00e7\u0131k oldu\u011fundan emin olun.
\n*   Packetbeat’in hata g\u00fcnl\u00fcklerini kontrol edin: sudo journalctl -u packetbeat<\/code>.
\n*   Firewall (UFW) kurallar\u0131n\u0131 kontrol edin. Packetbeat’in Elasticsearch’e 9200 portundan eri\u015febilmesi gerekir.<\/p>\n
4. Packetbeat sistem kaynaklar\u0131n\u0131 ne kadar t\u00fcketir?<\/strong>
\nPacketbeat olduk\u00e7a hafiftir, ancak kaynak t\u00fcketimi izlenen a\u011f trafi\u011finin yo\u011funlu\u011funa ve etkinle\u015ftirilen protokollerin say\u0131s\u0131na ba\u011fl\u0131d\u0131r. Y\u00fcksek trafikli ortamlarda CPU ve bellek kullan\u0131m\u0131 artabilir. top<\/code> veya htop<\/code> gibi komutlarla Packetbeat s\u00fcrecini izleyebilirsiniz. Gerekirse packetbeat.interfaces.snapshot_length<\/code> de\u011ferini d\u00fc\u015f\u00fcrerek yakalanan paket boyutunu s\u0131n\u0131rlayabilir veya daha az protokol\u00fc izleyebilirsiniz.<\/p>\n
5. Ubuntu 16.04 yerine ba\u015fka bir da\u011f\u0131t\u0131mda \u00e7al\u0131\u015f\u0131r m\u0131?<\/strong>
\nEvet, Elastic Stack \u00fcr\u00fcnleri (Packetbeat, Elasticsearch, Kibana) \u00e7e\u015fitli Linux da\u011f\u0131t\u0131mlar\u0131nda, Windows ve macOS \u00fczerinde \u00e7al\u0131\u015fabilir. Kurulum ad\u0131mlar\u0131 ve paket y\u00f6neticileri farkl\u0131l\u0131k g\u00f6sterse de, yap\u0131land\u0131rma mant\u0131\u011f\u0131 genellikle ayn\u0131d\u0131r.<\/p>\n
6. G\u00fcvenlik konusunda nelere dikkat etmeliyim?<\/strong>
\n*   A\u011f Eri\u015fimi:<\/strong> Elasticsearch ve Kibana’ya d\u0131\u015far\u0131dan eri\u015fimi IP baz\u0131nda k\u0131s\u0131tlamak i\u00e7in firewall (UFW) kullan\u0131n.
\n*   Kimlik Do\u011frulama:<\/strong> \u00dcretim ortamlar\u0131nda Elasticsearch ve Kibana i\u00e7in kullan\u0131c\u0131 ad\u0131\/\u015fifre tabanl\u0131 kimlik do\u011frulama ve yetkilendirme (X-Pack Security) kullanmay\u0131 d\u00fc\u015f\u00fcn\u00fcn.
\n*   Veri \u015eifreleme:<\/strong> Hassas veriler aktar\u0131l\u0131yorsa TLS\/SSL ile ileti\u015fimi \u015fifreleyin.
\n*   Packetbeat Yetkileri:<\/strong> Packetbeat a\u011f aray\u00fczlerini dinlemek i\u00e7in root<\/code> yetkilerine veya CAP_NET_RAW<\/code> yetene\u011fine ihtiya\u00e7 duyar. G\u00fcvenlik a\u00e7\u0131s\u0131ndan, Packetbeat’i ayr\u0131cal\u0131kl\u0131 olmayan bir kullan\u0131c\u0131 olarak \u00e7al\u0131\u015ft\u0131rmak ve yaln\u0131zca gerekli yetkileri vermek tercih edilir.<\/p>\n
<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)\nModern altyap\u0131larda sistemlerin ve uygulamalar\u0131n sa\u011fl\u0131\u011f\u0131n\u0131, performans\u0131n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-37628","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nAltyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)\" \/>\n<meta property=\"og:description\" content=\"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04) Modern altyap\u0131larda sistemlerin ve uygulamalar\u0131n sa\u011fl\u0131\u011f\u0131n\u0131, performans\u0131n\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-10T22:41:26+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)\",\"datePublished\":\"2026-01-10T22:41:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\"},\"wordCount\":1825,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\",\"name\":\"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-10T22:41:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/","og_locale":"tr_TR","og_type":"article","og_title":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)","og_description":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04) Modern altyap\u0131larda sistemlerin ve uygulamalar\u0131n sa\u011fl\u0131\u011f\u0131n\u0131, performans\u0131n","og_url":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-10T22:41:26+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"11 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)","datePublished":"2026-01-10T22:41:26+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/"},"wordCount":1825,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/","url":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/","name":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-10T22:41:26+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/altyapi-metriklerini-packetbeat-ve-elk-ile-toplama-ubuntu-16-04\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Altyap\u0131 Metriklerini Packetbeat ve ELK ile Toplama (Ubuntu 16.04)"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37628"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37628\/revisions"}],"predecessor-version":[{"id":37629,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37628\/revisions\/37629"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}