Here’s my write-up for the retired Haystack. An ELK stack deployment may have noble aspirations but not security in mind.
https://hackso.me/haystack-htb-walkthrough/