3. Example

A Step by step Example

It is possible to create random logs to test the project just by running the commands below:

1. Launch Elasticsearch and Kibana with the docker-compose -f docker-compose.yaml -f docker-compose.elastic.yaml up -d elasticsearch kibana command`
2. Load the Elastic Common Schema template running the ./load_templates.sh script
3. Go on Kibana at localhost:5601 → Stack Management → Index Patterns and create a new Index pattern with cloud-* as name and select @timestamp for the timestamp field
4. Create the random test data launching the Python script from the buffalogs_module/examples folder: python random_example.py
5. Check: Now, you should be able to visualize 2000 Docs count at Stack management → Index Management for the cloud-<today_date> index

And you can analyze the logs data newly uploaded at localhost:5601

At this stage, it is your choice to run the application manually or automatically (using Celery).

Running Manually

To run the application manually, launch the management command below from buffalogs_module/buffalogs:

python manage.py impossible_travel

You can also clear all the data saved in the database just running:

python manage.py clear_models

Running Automatically

To run it in an automated way, just start up all the tools with:

sudo docker-compose up -d

Results

In both cases, the results are available at localhost:80

Dashboard Page

Users Page

All Logins associated to the user

Unique Logins

Just the details of the logins with different user agents or countries

Alerts related to the user