# LogServer

Centralized logging with ELK Stack (Elasticsearch, Logstash, Kibana).

## Quick Start

1. **System Setup**
```bash
sudo sysctl -w vm.max_map_count=262144
```

2. **Configure**
Edit `config/service.env`:
- Set `SERVER_PUBLICBASEURL` to your actual server URL
- Set `KIBANA_USERNAME` to your preferred username
- Change `KIBANA_USER_PASSWORD` from default

3. **Install**
```bash
dropshell install logserver
```

4. **Generate Client Keys**
```bash
./generate-api-key.sh
# Enter hostname when prompted
# Copy the generated config to clients
```

5. **Access Kibana**
- URL: `http://<server-ip>:5601`
- Username: Set in `service.env` (KIBANA_USERNAME, default: `admin`)
- Password: Set in `service.env` (KIBANA_USER_PASSWORD)

## Ports
- `5601` - Kibana Web UI
- `5044` - Log ingestion (Filebeat)

## Files
- `config/service.env` - Configuration
- `config/api-keys.yml` - Client API keys
- `generate-api-key.sh` - Add new clients

See [DOCUMENTATION.md](DOCUMENTATION.md) for full details.