Logsearch for Bosh

Introduction

A BOSH release of a Logsearch for Cloud Foundry. Below are the steps to deploy Logsearch for Cloud Foundry operations.

Preparation

Clone this repository into your workspace directory Change working directory. Run bundle install Run bosh prepare deployment Filters

The logsearch community has created some pre-built filters. They are distributed as plugin repositories (such as https://github.com/logsearch/logsearch-filters-common).

A rake task is provided to fetch a subset of these plugin filters and update the templates/ to include the logstash filters.

rake plugins:update Currently some plugins test suites fail - you can continue with:

rake plugins:update_templates Open issues for failing test suites for plugins:

cf website Upload Stemcell

Upload stemcell.

bosh public stemcells | awk '/aws/ && /go_agent/ && /ubuntu/' bosh download public stemcell bosh-stemcell-2865.1-aws-xen-ubuntu-trusty-go_agent.tgz bosh upload stemcell bosh-stemcell-2865.1-aws-xen-ubuntu-trusty-go_agent.tgz Upload Release

Upload route-registrar-boshrelease $git clone https://github.sw.ge.com/cf-platform-services/route-registrar-boshrelease.git Run the upload command $cd route-registrar-boshrelease $bosh upload release releases/route-registrar-1.yml Create Manifest and Deploy

Create a deployment file called deployments/cf-rX-logsearch.yml by copying and modifying the template below - i.e. /data/workspace/logsearch-boshworkspace/deployments/logsearch-aws-vpc.yml and /data/workspace/logsearch-boshworkspace/templates/logsearch/infrastructure-aws-vpc.yml into /data/workspace/logsearch-boshworkspace/templates/ge/infrastructure-rX.yml. Replace X with the CF release number (e.g. R2, R4, etc) -Tip: director UUID can be found by the command bosh status

There are no spiff templates currently setup for logstash, therefore we must modify the deployment manifest separately, and we can move directly to deploying the manifest $ bosh deployment deployments/cf-rX-logsearch.yml && bosh deploy Change CF deployment manifest syslog config and redeploy

properties: syslog_daemon_config: address: port: 5515 transport: relp Access Kibana UI via Cloud Foundry router

Now you can browse to the Kibana dashboard:

PCF R2 PCF R4