Skip to main content

Canarytrace Installer

What you’ll learn#

  • This installer prepare Elasticsearch and Kibana for Canarytrace use
  • What is options for Canarytrace Installer?

What is Canarytrace Installer?#

Canarytrace is known as plug'n'play stack and it's means, that first run is very quickly and doesn't require lengthy set up. Set up Elasticsearch and Kibana it's also fast, thanks to prepared Canarytrace Installer.


  • Select version of Installer by version of Elasticsearch and Kibana. E.g. if you use Elasticsearch 7.10.0 and Kibana 7.10.0 select Installer 7.10.0
  • Choose the right version according to the docker image tag
  • Latest supported version of Elasticsearch and Kibana is 7.10.0
  • Dockerized - the docker image tag corresponds to the version of the Elasticsearch for which it is intended
  • Ready for Canarytrace and for Canarytrace Pro
  • Ready for local use
  • Ready for use on

What does installation contain?#

  • Install index patterns
    • Index patterns tell Kibana which Elasticsearch indices you want to explore. An index pattern can match the name of a single index, or include a wildcard (*) to match multiple indices.
  • Install templates
    • An index template is a way to tell Elasticsearch how to configure an index when it is created.
  • Install visualizations
    • Visualize enables you to create visualizations of the data from your Elasticsearch indices, which you can then add to dashboards for analysis.
  • Install dashboards
    • A dashboard is a collection of visualizations, searches, and maps, typically in real-time. Dashboards provide at-a-glance insights into your data and enable you to drill down into details.

Docker image#

Canarytrace Installer is available on our docker registry

Set up Elasticsearch and Kibana on localhost#


Run Canarytrace Installer

docker run --name installer --net canary --rm

Command Line#

This setting allows you to change the default setting. For example, Elasticsearch runs somewhere in the cloud.

  • ELASTIC_ENDPOINT=http://localhost for local installation of Elasticsearch or elasticsearch if you use --net canary bridge or if you use
  • ELASTIC_PORTT=9200 this is a default REST-API port of Elasticsearch
  • ELASTIC_INDEX_PREFIX=c default is c, e.g. index*
  • ELASTIC_USER=elastic
  • ELASTIC_PASS=12345
  • KIBANA_ENDPOINT=http://localhost for local installation of Elasticsearch or kibana if you use --net canary bridge or `
  • KIBANA_PORT=5601
  • KIBANA_USER=elastic
  • KIBANA_PASS=@josePh8

Example with docker-compose and

docker-compose contains configuration for prepare Elasticsearch and Kibana on elastic.

version: "3.8"
ELASTIC_USER: 'elastic'
KIBANA_USER: 'elastic'

save the code to a file docker-compose.yaml and run docker-compose up