Following this guide I set up ELK stack in a VM.  Currently only getting logs from my www server, but will add others later.  Also need to mess with grok.