HELK Installation Guide
This runbook documents the steps to install HELK (Hunting ELK) on the Ubuntu VM.
Prerequisites
- Ubuntu 20.04 / 22.04 LTS VM
- Static IP (ex:
10.2.0.10) - 4 vCPU / 8–16 GB RAM / 100GB+ disk
- Internet access for package & Docker pulls
1. Prepare the VM
Update system and install dependencies:
sudo apt update && sudo apt upgrade -y
sudo apt install -y git curl wget apt-transport-https ca-certificates gnupg lsb-release
2. Install Docker & Docker Compose
# Install Docker
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
# Add your user to Docker group (optional)
sudo usermod -aG docker $USER
# Install Docker Compose (plugin)
sudo apt install -y docker-compose-plugin
3. Clone HELK Repository
git clone https://github.com/Cyb3rWard0g/HELK.git
cd HELK/docker
4. Run Installer
sudo ./helk_install.sh
5. Verify Installation
docker ps
Expected:
- `helk-elasticsearch`
- `helk-logstash`
- `helk-kibana`
- `helk-zookeeper`
- `helk-kafka`
- `helk-jupyter`
6. Access Kibana & Jupyter
## 6. Access Kibana & Jupyter
- Kibana: http://10.2.0.10:5601
Jupyter: http://10.2.0.10:8880