When configuring any service, especially a service that is present on many host, one should look to Puppet for help. In the case of Logstash, we can configure all of its components using Puppet, and we can configure our hosts to report data as well. In this section, we'll see how to install the base Logstash components using Puppet. Depending on the desired configuration, this could be repeated for each host, or you could use another system to transport logs, one of which we'll see in a later section.

We'll be extending the roles and profiles concept we introduced in the previous chapter to configure these services. As such, make sure you still have these modules available.

Let's begin with Elasticsearch.