Added missing files. Add rsyslog input to logstash

docker-compose/elk-configure-host/Dockerfile

+FROM ubuntu:20.04
+
+# Expand VM settings as required by ELK
+CMD bash -c "if test $(sysctl -n vm.max_map_count) -lt 262144; then sudo sysctl -w vm.max_map_count=262144; fi"

docker-compose/elk.yml

@@ -17,12 +17,15 @@ services:
     network_mode: ${NETWORK_MODE}
 
   elk:
-    image: sebp/elk
+    image: elk
+    build:
+        context: elk
     container_name: ${CONTAINER_NAME_PREFIX}elk
     network_mode: ${NETWORK_MODE}
     ports:
       - "5601:5601"
       - "9200:9200"
       - "5044:5044"
+      - "514:514"
     depends_on:
       - elk-configure-host

docker-compose/elk/Dockerfile

+FROM sebp/elk
+
+# Give more time for ElasticSearch to startup on our poor dev laptops
+ENV ES_CONNECT_RETRY=60
+
+# Let logstash parse remote syslog input
+COPY logstash-syslog-input.local.conf /etc/logstash/conf.d/03-syslog-input.conf

docker-compose/elk/logstash-syslog-input.local.conf

+input {
+  syslog {
+  }
+}