'sudo apt-get install apt-transport-https'


### 4. Add Elasticsearch|Logstash|Kibana Repositories (version 6+) 

'sudo apt-get update'

### 6. Install Java 8

'sudo apt-get install elasticsearch && sudo apt-get install kibana && sudo apt-get install logstash'

# Configure Kibana|v6.6+

### 9. Configure Kibana

'server.port: 5601'
'server.host: "0.0.0.0"'

# Configure Logstash|v6.6+

### 11. Change Directory

'sudo wget https://raw.githubusercontent.com/a3ilson/pfelk/master/01-inputs.conf'

'sudo wget https://raw.githubusercontent.com/a3ilson/pfelk/master/11-pfsense.conf'

'sudo mkdir /etc/logstash/conf.d/patterns'

### 14. Navigate to Patterns Folder

'sudo wget https://raw.githubusercontent.com/a3ilson/pfelk/master/pfsense_2_4_2.grok'

### 16. Edit (10-syslog.conf)arkdown

'Change line 3; the "if [host]..." should point to your pfSense IP address'
'Change line 9 to point to your second PfSense IP address of comment out'

### 18. Edit (11-pfsense.conf)

Change line 12 to the same timezone as your phSense configruation
_Note if the timezone is offset or mismatched, you may not see any logs_

### 20. Download and install the MaxMind GeoIP database

'sudo wget http://geolite.maxmind.com/download/geoip/database/GeoLite2-City.mmdb.gz'

### 22. Download and install the MaxMind GeoIP database

'sudo /bin/systemctl daemon-reload'
'sudo /bin/systemctl enable elasticsearch.service'
'sudo /bin/systemctl enable kibana.service'
'sudo /bin/systemctl enable logstash.service'

### Start Services Manually

'systemctl status elasticsearch.service'

'systemctl status kibana.service'

'systemctl status logstash.service'

### Troubleshooting