Added volume for persistent logging, added default kibana objects

docker-compose/elk.yml

@@ -8,6 +8,9 @@
 #
 version: '2'
 
+volumes:
+  elk-data: {}
+
 services:
   elk-configure-host:
     image: elk-configure-host
@@ -22,6 +25,8 @@ services:
         context: elk
     container_name: ${CONTAINER_NAME_PREFIX}elk
     network_mode: ${NETWORK_MODE}
+    volumes:
+      - elk-data:/var/lib/elasticsearch
     ports:
       - "5601:5601" # kibana
       - "9200:9200" # elasticsearch

docker-compose/elk/Dockerfile

@@ -9,4 +9,9 @@ ADD logstash /etc/logstash/
 # Provide our kibana config
 # See also https://www.elastic.co/guide/en/kibana/7.x/saved-objects-api-import.html
 # and https://github.com/Bitergia/archimedes
+#
+# For now, start the container and run in this directory
+#
+# $ curl -X POST http://localhost:5601/api/saved_objects/_import -H "kbn-xsrf: true" --form file=@kibana/default-objects.ndjson
+
 

docker-compose/elk/kibana/default-objects.ndjson

+{"attributes":{"fieldAttrs":"{\"level\":{\"count\":1},\"message\":{\"count\":1},\"program\":{\"count\":2}}","fields":"[]","timeFieldName":"@timestamp","title":"logstash-*"},"id":"5340ad20-923d-11eb-9cc8-2fc0b321a697","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-03-31T18:16:04.716Z","version":"WzE0NiwxXQ=="}
+{"attributes":{"columns":["extra.device","level","message"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"Last hour","version":1},"id":"cf4947d0-924f-11eb-9cc8-2fc0b321a697","migrationVersion":{"search":"7.9.3"},"references":[{"id":"5340ad20-923d-11eb-9cc8-2fc0b321a697","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2021-03-31T18:35:04.269Z","version":"WzE2NywxXQ=="}
+{"exportedCount":2,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file