Introduction to the ELK Stack Automation PowerPack

Download this manual as a PDF file 

This section describes the how to integrate ELK Stack SyncPack with SL1 using the ELK Stack Automation PowerPack. This PowerPack also contains the Run Book Automation policies, event policies, and Run Book Action policies you can use with the ELK Stack in PowerFlow.

What is the ELK Stack AutomationPowerPack?

The ELK Stack Automation PowerPack includes automation policies and event policies that bidirectionally sync jobs, pipeline jobs, and node status between ELK and SL1 This PowerPack also comes with one example credential.

The ELK Stack Automation PowerPack includes:

  • ELK: IndexCreate Run Book Automation policy
  • ELK: ExtLog Run Book Automation policy
  • ELK: Search in ELK in SL1 Run Book Automation policy
  • ELK: ExternalLog event policy
  • ELK: Sync SL1 Log event policy
  • ELK: Search event policy
  • PowerFlow ELK SOAP/XML Credentials

Installing the ELK Stack Automation PowerPack

Before completing the steps in this section, you must import and install the latest version of the ELK Stack Automation PowerPack.

IMPORTANT:: You must install and configure the ELK Stack SyncPack version 1.0.0 before using the ELK Stack Automation PowerPack.

The ELK Stack Automation PowerPack requires SL1 version 11.1.0 or later. For details on upgrading SL1, see the appropriate SL1 Release Notes.

By default, installing a new version of a PowerPack overwrites all content from a previous version of that PowerPack that has already been installed on the target system. You can use the Enable Selective PowerPack Field Protection setting in the Behavior Settings page (System > Settings > Behavior) to prevent new PowerPacks from overwriting local changes for some commonly customized fields. (For more information, see the section on Global Settings.)

To download and install the PowerPack:

  1. Search for and download the PowerPack from the PowerPacks page (Product Downloads > PowerPacks & SyncPacks) at the ScienceLogic Support Site.
  2. In SL1, go to the PowerPacks page (System > Manage > PowerPacks).
  3. Click the Actions button and choose Import PowerPack. The Import PowerPack dialog box appears.
  4. Click [Browse] and navigate to the PowerPack file from step 1.
  5. Select the PowerPack file and click Import. The PowerPack Installer modal displays a list of the PowerPack contents.
  6. Click Install. The PowerPack is added to the PowerPacks page.

If you exit the PowerPack Installer modal without installing the imported PowerPack, the imported PowerPack will not appear in the PowerPacks page. However, the imported PowerPack will appear in the Imported PowerPacks modal. This page appears when you click the Actions menu and select Install PowerPack.