{"action":"created","issue":{"url":"https://api.github.com/repos/iflowfor8hours/sandcastle/issues/35","repository_url":"https://api.github.com/repos/iflowfor8hours/sandcastle","labels_url":"https://api.github.com/repos/iflowfor8hours/sandcastle/issues/35/labels{/name}","comments_url":"https://api.github.com/repos/iflowfor8hours/sandcastle/issues/35/comments","events_url":"https://api.github.com/repos/iflowfor8hours/sandcastle/issues/35/events","html_url":"https://github.com/iflowfor8hours/sandcastle/pull/35","id":138471565,"number":35,"title":"Centralized logging with ELK and filebeat","user":{"login":"iflowfor8hours","id":634449,"avatar_url":"https://avatars.githubusercontent.com/u/634449?v=3","gravatar_id":"","url":"https://api.github.com/users/iflowfor8hours","html_url":"https://github.com/iflowfor8hours","followers_url":"https://api.github.com/users/iflowfor8hours/followers","following_url":"https://api.github.com/users/iflowfor8hours/following{/other_user}","gists_url":"https://api.github.com/users/iflowfor8hours/gists{/gist_id}","starred_url":"https://api.github.com/users/iflowfor8hours/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iflowfor8hours/subscriptions","organizations_url":"https://api.github.com/users/iflowfor8hours/orgs","repos_url":"https://api.github.com/users/iflowfor8hours/repos","events_url":"https://api.github.com/users/iflowfor8hours/events{/privacy}","received_events_url":"https://api.github.com/users/iflowfor8hours/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-03-04T13:04:33Z","updated_at":"2016-03-07T22:01:36Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/iflowfor8hours/sandcastle/pulls/35","html_url":"https://github.com/iflowfor8hours/sandcastle/pull/35","diff_url":"https://github.com/iflowfor8hours/sandcastle/pull/35.diff","patch_url":"https://github.com/iflowfor8hours/sandcastle/pull/35.patch"},"body":"Forwarding to an external ELK stack is working. I need to refactor\r\nthe filebeat client into a role on it's own eventually, but I'm\r\nnot sure the best way to proceed with testing.\r\nIn my setup, I used a [docker based elk\r\nstack](https://github.com/blacktop/docker-elk) and logs were coming\r\nthrough. There is still a fair bit of work that needs to be done\r\nto make these logs useful and searchable, as at the moment ES\r\ndoes not know how to parse the fields in our logs.\r\nSending logs over SSL will require some orchestration of certs,\r\nbut in manually testing it appeared to work."},"comment":{"url":"https://api.github.com/repos/iflowfor8hours/sandcastle/issues/comments/193475455","html_url":"https://github.com/iflowfor8hours/sandcastle/pull/35#issuecomment-193475455","issue_url":"https://api.github.com/repos/iflowfor8hours/sandcastle/issues/35","id":193475455,"user":{"login":"iflowfor8hours","id":634449,"avatar_url":"https://avatars.githubusercontent.com/u/634449?v=3","gravatar_id":"","url":"https://api.github.com/users/iflowfor8hours","html_url":"https://github.com/iflowfor8hours","followers_url":"https://api.github.com/users/iflowfor8hours/followers","following_url":"https://api.github.com/users/iflowfor8hours/following{/other_user}","gists_url":"https://api.github.com/users/iflowfor8hours/gists{/gist_id}","starred_url":"https://api.github.com/users/iflowfor8hours/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iflowfor8hours/subscriptions","organizations_url":"https://api.github.com/users/iflowfor8hours/orgs","repos_url":"https://api.github.com/users/iflowfor8hours/repos","events_url":"https://api.github.com/users/iflowfor8hours/events{/privacy}","received_events_url":"https://api.github.com/users/iflowfor8hours/received_events","type":"User","site_admin":false},"created_at":"2016-03-07T22:01:36Z","updated_at":"2016-03-07T22:01:36Z","body":"@conorsch Thanks for keeping in an eye on this. I would be really happy to have a look at your work for the filebeat setup. I feel like this is pretty thrown together and although it will work, I'm not 100% happy with it. I'll put some thought into getting around the lack of mutual auth as well and see if I come up with anything. "}}