elk: elasticsearch+kibana+logstash<\/p>\n
\u81ea\u4eceelk\u5347\u7ea78.0\u4ee5\u540e\uff0c\u5f3a\u5236\u4f7f\u7528\u4e0a\u4e86SSL(\u53ef\u4ee5\u5173\u95ed)\uff0c\u8e29\u4e86\u4e0d\u5c11\u7684\u5751\uff0c\u82b1\u4e86\u4e0d\u5c11\u65f6\u95f4\u6298\u817e\u3002<\/p>\n
\u4f7f\u7528\u7684\u7248\u672c8.0.0<\/p>\n
\u51713\u4e2a\u90e8\u5206\uff0c\u8fd9\u662f\u7b2c3\u90e8\u5206,logstash8<\/p>\n
_________________________________________________________________________________________________<\/p>\n
1. \u5b89\u88c5docker<\/p>\n
2. \u5b89\u88c5logstash<\/p>\n
docker pull logstash:8.0.0<\/p>\n
3. \u8fd0\u884clogstash, \u4e0d\u52a0\u8f7d\u76ee\u5f55<\/p>\n
docker run -p5044:5044 -p9600:9600 -d –name logstash logstash:8.0.0
\n\u8fd0\u884c\u540e\uff0c\u590d\u5236\u76ee\u5f55\u5230\u5bbf\u4e3b\u673a<\/p>\n
#docker cp 0000:\/usr\/share\/logstash \/mnt\/md0\/appdata\/mydocker<\/p>\n
0000\u662fcontainer_id, \/mnt\/md0\/appdata\/mydocker\u662f\u672c\u5730\u76ee\u5f55\uff0c\u8fd9\u4e24\u4e2a\u5730\u65b9\u6362\u6210\u81ea\u5df1\u7684<\/p>\n
\u5b8c\u6210\u540e\uff0c\u505c\u6b62\u5bb9\u5668<\/p>\n
docker stop 0000<\/p>\n
\u5220\u9664\u5bb9\u5668<\/p>\n
docker rm 0000<\/p>\n
4.\u8fd0\u884c\u6b63\u5f0f\u7684logstash<\/p>\n
docker run –restart=always –log-driver json-file –log-opt max-size=100m –log-opt max-file=2 -p5044:5044 -p9600:9600 -v \/mnt\/md0\/appdata\/mydocker\/logstash\/config:\/usr\/share\/logstash\/config -v \/mnt\/md0\/appdata\/mydocker\/logstash\/data:\/usr\/share\/logstash\/data -v \/mnt\/md0\/appdata\/mydocker\/logstash\/logs:\/usr\/share\/logstash\/logs -v \/mnt\/md0\/appdata\/mydocker\/logstash\/config.d:\/usr\/share\/logstash\/config.d -v \/mnt\/md0\/appdata\/mydocker\/logstash\/pipeline:\/usr\/share\/logstash\/pipeline -v \/mnt\/md0\/appdata\/mydocker\/logstash\/jar:\/usr\/share\/logstash\/jar -e TZ=Asia\/Shanghai -d –name logstash logstash:8.0.0<\/p>\n
5.\u8fdb\u5165config\u76ee\u5f55\uff0c\u4fee\u6539host\u548c\u8fde\u63a5\u7684\u5bc6\u7801\uff0c\u8fd9\u91cc\u5077\u61d2\uff0c\u5c31\u628a\u5bc6\u94a5\u6587\u4ef6\u653e\u5728jar\u76ee\u5f55\u4e0b\u4e86<\/p>\n
\u67e5\u770belastic\u7684IP,<\/p>\n
#docker inspect –format ‘{{ .NetworkSettings.IPAddress }}’ es<\/p>\n
\u67e5\u770b\u6700\u540e\u4e00\u8282<\/p>\n
6. \u5728config.d\u76ee\u5f55\u4e0b\uff0c\u65b0\u5efalogstash2.conf<\/p>\n
input {
\ngenerator {
\nmessage => “stonetest001”
\ncount => 1
\n}
\n}<\/p>\n
output {
\nstdout {
\ncodec => rubydebug
\n}<\/p>\n
elasticsearch {
\nhosts => [“https:\/\/172.17.0.5:9200”]
\nindex => “data-%{+YYYY.MM.dd}”
\ncacert => “\/usr\/share\/logstash\/jar\/http_ca.crt”
\nuser => “elastic”
\npassword => “111111”
\n#ssl_certificate_verification => true
\n#truststore => “\/usr\/share\/logstash\/jar\/http.p12”
\n#truststore_password => “F5tj__WeSyqCCTb19jdUaw”
\n}
\n}<\/p>\n
\u8fdb\u5165\u5bb9\u5668 docker exec -it 0000 bash<\/p>\n
\/usr\/share\/logstash\/bin\/logstash -f \/usr\/share\/logstash\/config.d\/logstash2.conf<\/p>\n
\u5982\u6709\u9519\u8bef, \u65b9\u68481\uff1a
\nLogstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances, you must change the “path.data” setting.
\n\u95ee\u9898\u539f\u56e0\u662f\uff1a
\n\u4e4b\u524d\u8fd0\u884c\u7684instance\u6709\u7f13\u51b2\uff0c\u9ed8\u8ba4\u4fdd\u5b58\u5728data\u76ee\u5f55\u4e0b
\n\u89e3\u51b3\u65b9\u6cd5\uff1a
\ncd data
\nls -a
\nrm -f .lock<\/p>\n
\u65b9\u68482(\u968f\u4fbf\u6307\u5b9a\u4e00\u4e2a\u76ee\u5f55, \u8bd5\u8fc7\u4e86\u4e0d\u884c)\uff1a<\/p>\n
\/usr\/share\/logstash\/bin\/logstash -f \/usr\/share\/logstash\/config.d\/logstash2.conf –path.settings=\/etc\/logstash<\/p>\n
7.\u5b8c\u6210\u540e\u9a8c\u8bc1<\/p>\n
\u6d4f\u89c8\u5668\u8bbf\u95eekibana\u8fdb\u884c\u9a8c\u8bc1, \u767b\u9646\u540e\uff0c\u5728\u83dc\u5355 Management > Dev Tools \uff0c\u5728\u9875\u9762\u4e2d\u70b9\u51fb\u8fd0\u884c<\/p>\n
\u5982\u679chits\u6bb5\u4e2d\u6709\u6570\u636e\uff0c\u8bf4\u660e\u6210\u529f\u4e86\uff01<\/p>\n
8.\u9644\u4e0alogstash.yml<\/p>\n
#http.host: “0.0.0.0”
\n#xpack.monitoring.elasticsearch.hosts: [ “https:\/\/172.17.0.5:9200” ]<\/p>\n
http.host: “0.0.0.0”
\nxpack.monitoring.elasticsearch.hosts: [ “https:\/\/172.17.0.5:9200” ]<\/p>\n
xpack.monitoring.enabled: true
\nxpack.monitoring.elasticsearch.username: “logstash_system”
\nxpack.monitoring.elasticsearch.password: “111111”<\/p>\n
#\u4f60\u7684ca.pem \u7684\u6240\u5728\u8def\u5f84
\nxpack.monitoring.elasticsearch.ssl.certificate_authority: “\/usr\/share\/logstash\/jar\/http_ca.crt”
\nxpack.monitoring.elasticsearch.ssl.verification_mode: certificate
\n# \u63a2\u55c5 es\u8282\u70b9\uff0c\u8bbe\u7f6e\u4e3a false
\nxpack.monitoring.elasticsearch.sniffing: false<\/p>\n","protected":false},"excerpt":{"rendered":"
elk: elasticsearch+kibana+logstash \u81ea\u4eceelk\u5347\u7ea78.0\u4ee5\u540e\uff0c\u5f3a\u5236\u4f7f\u7528\u4e0a\u4e86SSL(\u53ef\u4ee5\u5173\u95ed)\uff0c\u8e29\u4e86\u4e0d\u5c11\u7684\u5751\uff0c\u82b1\u4e86\u4e0d\u5c11\u65f6\u95f4\u6298\u817e\u3002 \u4f7f\u7528\u7684\u7248\u672c8.0.0 \u51713\u4e2a\u90e8\u5206\uff0c\u8fd9\u662f\u7b2c3\u90e8\u5206,logstash8 _________________________________________________________________________________________________ 1. \u5b89\u88c5docker 2. \u5b89\u88c5logstash docker pull logstash:8.0.0 3. \u8fd0\u884clogstash, \u4e0d\u52a0\u8f7d\u76ee\u5f55 docker run -p5044:5044 -p9600:9600 -d –name logstash logstash:8.0.0 \u8fd0\u884c\u540e\uff0c\u590d\u5236\u76ee\u5f55\u5230\u5bbf\u4e3b\u673a #docker cp 0000:\/usr\/share\/logstash \/mnt\/md0\/appdata\/mydocker 0000\u662fcontainer_id, \/mnt\/md0\/appdata\/mydocker\u662f\u672c\u5730\u76ee\u5f55\uff0c\u8fd9\u4e24\u4e2a\u5730\u65b9\u6362\u6210\u81ea\u5df1\u7684 \u5b8c\u6210\u540e\uff0c\u505c\u6b62\u5bb9\u5668 docker stop 0000 \u5220\u9664\u5bb9\u5668 docker rm 0000 4.\u8fd0\u884c\u6b63\u5f0f\u7684logstash docker run –restart=always –log-driver json-file –log-opt max-size=100m –log-opt max-file=2 -p5044:5044 -p9600:9600 -v \/mnt\/md0\/appdata\/mydocker\/logstash\/config:\/usr\/share\/logstash\/config -v \/mnt\/md0\/appdata\/mydocker\/logstash\/data:\/usr\/share\/logstash\/data […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-763","post","type-post","status-publish","format-standard","hentry","category-java"],"_links":{"self":[{"href":"http:\/\/22pig.com\/index.php?rest_route=\/wp\/v2\/posts\/763","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/22pig.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/22pig.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/22pig.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/22pig.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=763"}],"version-history":[{"count":4,"href":"http:\/\/22pig.com\/index.php?rest_route=\/wp\/v2\/posts\/763\/revisions"}],"predecessor-version":[{"id":776,"href":"http:\/\/22pig.com\/index.php?rest_route=\/wp\/v2\/posts\/763\/revisions\/776"}],"wp:attachment":[{"href":"http:\/\/22pig.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=763"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/22pig.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=763"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/22pig.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=763"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}