Clone this repository, cd into it, then:

docker-compose up

Try to open kibana UI: http://localhost:5601 (default credentials: elastic/changeme)

For logstash, put conf files in pipeline directory, they will be executed in alphabetical order. You can also put data files in data directory. Then you can stop/start logstash:

docker-compose stop logstash
docker-compose up logstash

You may fall on the following error when starting ElasticSearch:

max virtual memory areas vm.max_map_count [65530] likely too low, increase to at least [262144]

Just set the parameter accordingly:

sudo sysctl -w vm.max_map_count=262144