anchor.diff:  }
   ----------------------------------------------------------------------
   
  -
   [[logstash-installation]]
  -=== Logstash Installation (Optional)
  -
  -The simplest architecture for the Beat platform setup consists of the Beats
  -shippers, Elasticsearch and Kibana. This is nice and easy to get started with
  -and enough for networks with small traffic. It also uses the minimum amount of
  -servers: a single machine running Elasticsearch + Kibana. The Beat shippers
  +=== Installing Logstash (Optional)
  +
  +The simplest architecture for the Beats platform setup consists of Beats
  +shippers, Elasticsearch, and Kibana. This architecture is easy to get started 
  +with and sufficient for networks with low traffic. It also uses the minimum amount of
  +servers: a single machine running Elasticsearch and Kibana. The Beats shippers
   insert the transactions directly into the Elasticsearch instance.
   
  -This article explains how to use the Beat together with Logstash to provide
  -additional buffering. Another important advantage is that you have
  -the opportunity in Logstash to modify the data captured by Beat any way you
  -like. You can also use Logstash's many output plugins to integrate with other
  -systems.
  +This section explains how to use the Beats shippers together with Logstash to provide
  +additional buffering. An important advantage to this approach is that you can
  +use Logstash to modify the data captured by Beats in any way you like. You can also 
  +use Logstash's many output plugins to integrate with other systems.
   
   image:./images/beats-logstash.png[Integration with Logstash]
   
  -To download, install and run Logstash pick your platform and follow the steps
  -below:
  +To download, install, and run Logstash, pick your platform and follow these steps:
   
   deb:
   
  
positive.code: }
  ------------------------------------------------------------------------------
  
  Using this configuration, Logstash will index events in Elasticsearch the same
  way the Beat would.
  
  Now you can start logstash with:
  
  ["source","sh",subs="attributes,callouts"]
  ----------------------------------------------------------------------
  ./bin/logstash -f config.json
  ----------------------------------------------------------------------
  
  Adjust the path to your configuration file. In case you installed logstash
  as deb or rpm package, place the config file in the expected directory.
  
  NOTE: The default configuration in Beat and Logstash uses plain TCP. For
  encryption TLS must be explicitly enabled in the Beat and Logstash
  configuration.
  
  
  [[kibana-installation]]
  === Kibana installation
  
  https://www.elastic.co/products/kibana[Kibana] is a visualization application
  that gets its data from Elasticsearch. It provides a customizable and
  user-friendly UI in which you can combine various widget types to create your
  own dashboards. The dashboards can be easily saved, shared and linked.
  
  For this tutorial, we recommend to install Kibana on the same server as
  Elasticsearch, but it is not required.
  
  Use the following commands to download and run Kibana:
  
  
negative.code: ./bin/logstash
  ----------------------------------------------------------------------
  
  You can learn more about installing, configuring, and running Logstash
  https://www.elastic.co/guide/en/logstash/current/getting-started-with-logstash.html[here].
  
  
  
  ==== Setting Up Logstash
  
  Before setting up Logstash, you need to install the Beats shipper. For installation steps, 
  see the documentation for your Beats shipper. 
  
  In this setup, the Beats shipper sends events to Logstash. Logstash receives
  these events by using the
  https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html[Beats
  input plugin] and then sends the transaction to Elasticsearch by using the
  http://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html[Elasticsearch
  output plugin]. The Elasticsearch plugin of Logstash uses the bulk API, making
  indexing very efficient.
  
  The minimum required Logstash version for this plugin is 1.5.4. If you are using 
  Logstash 1.5.4, you must install the Beats input plugin before applying this 
  configuration because the plugin is not shipped with 1.5.4. To install
  the required plugin, run the following command inside the logstash directory
  (for deb and rpm installs, the directory is `/opt/logstash`).
  
  
  