Repolode
Submit
deviantony

deviantony/docker-elk

Docker Compose setup that runs the Elasticsearch, Logstash and Kibana (ELK) stack locally with minimal configuration.

View on GitHub
Stars
18,379
Forks
6,847
Open issues
5
Last commit
6 days ago

What is it?

docker-elk packages the Elastic stack (Elasticsearch, Logstash and Kibana) as Docker images and a Docker Compose file, so you can bring up a working search and visualization environment with a couple of commands. It is built on Elastic's official Docker images and tracks the latest Elastic Stack release on the main branch, with older major versions kept on separate branches.

The project is aimed at getting started and experimenting rather than production deployment. Configuration files for each component live in the repository, and environment variables in the Compose file can override settings. The setup creates the built-in users Kibana and Logstash need, and includes guidance on resetting passwords, tuning JVM heap sizes, and adding Logstash plugins by rebuilding images.

The default configuration disables Elasticsearch bootstrap checks and assigns small heap sizes, so the stack is suited to development machines with about 1.5 GB of RAM. Ports for Beats, TCP log input, Elasticsearch and Kibana are exposed by default. A separate tls branch enables TLS encryption.

Key features

  • 01Runs Elasticsearch, Logstash and Kibana together through a single Docker Compose file.
  • 02Includes a setup service that initializes the built-in users and roles.
  • 03Lets you override component settings with environment variables.
  • 04Provides a TCP input on port 50000 for sending log data to Logstash.
  • 05Offers a tls branch that enables TLS encryption in Elasticsearch and Kibana.
  • 06Keeps older Elastic Stack major versions on separate branches.

Use cases

  • Experimenting with Elasticsearch, Logstash and Kibana on a development machine.
  • Ingesting and exploring sample log files in Kibana.
  • Prototyping a logging pipeline before moving to a production cluster.
  • Learning how the Elastic stack components connect and authenticate.

Quick start

  1. 1

    Clone the repository

    git clone https://github.com/deviantony/docker-elk.git
  2. 2

    Initialize Elasticsearch users and groups

    docker compose up setup
  3. 3

    Start the stack components

    docker compose up

Things to know

  • Not intended for production; bootstrap checks are disabled and it is a template for development.
  • Requires at least 1.5 GB of RAM and Docker Compose.
  • Platinum features are enabled by default for a 30-day trial, then revert to the free license.

In collections

OpenTelemetry & observability platforms

Topics

#elasticsearch#logstash#kibana#docker-compose#logging#log-analysis#observability#docker#elk#searchguard

FAQ

What is docker-elk?
Docker Compose setup that runs the Elasticsearch, Logstash and Kibana (ELK) stack locally with minimal configuration. docker-elk packages the Elastic stack (Elasticsearch, Logstash and Kibana) as Docker images and a Docker Compose file, so you can bring up a working search and visualization environment with a couple of commands. It is built on Elastic's official Docker images and tracks the latest Elastic Stack release on the main branch, with older major versions kept on separate branches.
Is docker-elk free to use? What license does it have?
docker-elk is open source under the MIT license. Check the license terms before using it in commercial products.
Is docker-elk still maintained?
Actively maintained. The last commit to docker-elk was on Nov 2, 2026.
What can I use docker-elk for?
Experimenting with Elasticsearch, Logstash and Kibana on a development machine. Ingesting and exploring sample log files in Kibana. Prototyping a logging pipeline before moving to a production cluster. Learning how the Elastic stack components connect and authenticate.
How do I install docker-elk?
Clone the repository: git clone https://github.com/deviantony/docker-elk.git Initialize Elasticsearch users and groups: docker compose up setup Start the stack components: docker compose up
Where can I get docker-elk?
The source code and installation instructions are on GitHub: https://github.com/deviantony/docker-elk

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects

SigmaHQ / sigma

A generic, vendor-neutral signature format for describing log-based detections, plus a large shared library of ready-to-use Sigma rules.

Security#siem#detection-rules#log-analysis
11.4K+48 this week2.9KPythonOtherWell maintainedUpdated 22 hours ago