anchor.diff:  [[getting-started]]
  -== Getting started
  +== Getting Started
   
   A regular _Beats setup_ consists of:
   
  - * Beats shippers to collect the data. You should install these on
  -   your servers so that they capture the data.
  + * Beats shippers for collecting the data. You install these shippers on
  +   your servers to capture the data. For installation steps, see the documentation 
  +   for your Beat.
    * Elasticsearch for storage and indexing. <<elasticsearch-installation>>
  - * Optionally Logstash. <<logstash-installation>>
  + * Optionally Logstash for inserting data into Elasticsearch. <<logstash-installation>>
    * Kibana for the UI. <<kibana-installation>>
  - * Kibana dashboards to customize your widgets. <<load-kibana-dashboards>>
  -
  -NOTE:  For getting started, you can just install Elasticsearch and Kibana on a
  -single VM or even on your laptop. The only condition is that this machine is
  + * Kibana dashboards for visualizing the data. <<load-kibana-dashboards>>
  +
  +NOTE: To get started, you can install Elasticsearch and Kibana on a
  +single VM or even on your laptop. The only condition is that the machine must be 
   accessible from the servers you want to monitor. As you add more shippers and
  -your traffic grows, you will want replace the single Elasticsearch instance with
  -a cluster. You will probably also want to automate the installation process.
  +your traffic grows, you'll want to replace the single Elasticsearch instance with
  +a cluster. You'll probably also want to automate the installation process.
   
   [[elasticsearch-installation]]
  -=== Elasticsearch installation
  -
  -https://www.elastic.co/products/elasticsearch[Elasticsearch] is a distributed
  -real-time storage, search and analytics engine. It can be used for many
  +=== Installing Elasticsearch
  +
  +https://www.elastic.co/products/elasticsearch[Elasticsearch] is a real-time, 
  +distributed storage, search, and analytics engine. It can be used for many
   purposes, but one context where it excels is indexing streams of semi-structured
  -data, like logs or decoded network packets.
  +data, such as logs or decoded network packets.
   
   The binary packages of Elasticsearch have only one dependency: Java. Choose the
   section that fits your system (deb for Debian/Ubuntu, rpm for
  
positive.code: -------------------------------------------------------------------------
  
  The load command uploads the example dashboards, visualizations, and searches
  that can be used. Additionally, the index patterns for each Beat are created:
  
     - [packetbeat-]YYYY.MM.DD
     - [topbeat-]YYYY.MM.DD
     - [filebeat-]YYYY.MM.DD
  
  After loading the dashboards, Kibana rises the following error `No default index
  pattern. You must select or create one to continue.` that can be solved
  by setting one index pattern as favorite.
  
  image:./images/kibana-created-indexes.png[Kibana configured indexes]
  
  To open the loaded dashboards, go to the `Dashboard` page and click the "Open"
  icon. Select `Packetbeat Dashboard` from the list. You can then easily switch
  between the dashboards by using the `Navigation` widget.
  
  image:./images/kibana-navigation-vis.png[Navigation widget in Kibana]
  
  
negative.code: ./bin/logstash
  ----------------------------------------------------------------------
  
  You can learn more about installing, configuring, and running Logstash
  https://www.elastic.co/guide/en/logstash/current/getting-started-with-logstash.html[here].
  
  
  
  ==== Setting Up Logstash
  
  Before setting up Logstash, you need to install the Beats shipper. For installation steps, 
  see the documentation for your Beats shipper. 
  
  In this setup, the Beats shipper sends events to Logstash. Logstash receives
  these events by using the
  https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html[Beats
  input plugin] and then sends the transaction to Elasticsearch by using the
  http://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html[Elasticsearch
  output plugin]. The Elasticsearch plugin of Logstash uses the bulk API, making
  indexing very efficient.
  
  The minimum required Logstash version for this plugin is 1.5.4. If you are using 
  Logstash 1.5.4, you must install the Beats input plugin before applying this 
  configuration because the plugin is not shipped with 1.5.4. To install
  the required plugin, run the following command inside the logstash directory
  (for deb and rpm installs, the directory is `/opt/logstash`).
  
  
  