ELK安装与使用

逃离我推掉我的手 2022-05-16 12:21 220阅读 0赞

# mac环境安装 #

## brew方式 ##

安装教程：  
[https://www.jianshu.com/p/18074e1e719f][https_www.jianshu.com_p_18074e1e719f]  
[https://blog.csdn.net/ywheel1989/article/details/60519151][https_blog.csdn.net_ywheel1989_article_details_60519151]

### 安装es 和 kibana ###

//安装
    $ brew update
    $ brew install elasticsearch
    $ brew install kibana
    
    //查看版本
    elasticsearch --version
    kibana --version
    
    //可以分别看到两个软件的一些安装信息，比如安装路径和配置文件的路径等
    $ brew info elasticsearch
    $ brew info kibana
    
    //启动
    $ brew services start elasticsearch / 或者直接elasticsearch
    $ brew services stop elasticsearch
    $ brew services start kibana   或者直接kibana
    $ brew services stop kibana
    $ brew services restart elasticsearch
    $ brew services restart kibana
    
    //验证
    jps 
    localhost:9200  //es
    localhost:5601  //kibana

安装的路径

elasticsearch:  /usr/local/Cellar/elasticsearch/5.5.0
    Data:    /usr/local/var/elasticsearch/elasticsearch_xuchen/
    Logs:    /usr/local/var/log/elasticsearch/elasticsearch_xuchen.log
    Plugins: /usr/local/opt/elasticsearch/libexec/plugins/
    Config:  /usr/local/etc/elasticsearch/
    plugin script: /usr/local/opt/elasticsearch/libexec/bin/elasticsearch-plugin

插入文档数据

curl -XPUT "http://localhost:9200/movies/movie/1" -d'
    {
        "title": "The Godfather",
        "director": "Francis Ford Coppola",
        "year": 1972
    }' 或者 curl -H "Content-Type: application/json" -XPUT "http://localhost:9200/movies/movie/1" -d' cindy@cindydeAir
    {
        "title": "The Godfather",
        "director": "Francis Ford Coppola",
        "year": 1972
    }'

### 安装logstash ###

brew install logstash
    $ logstash --version
    
    logstash
    logstash -e ""//通过命令行，进入到logstash/bin目录，执行下面的命令

## 下载解压包方式 ##

# windows环境安装 #

# logstash使用 #

> 输出到es

配置文件/usr/local/etc/logstash/config\_command\_to\_es.conf

input { stdin { } }
    output {
      elasticsearch { hosts => ["localhost:9200"] }
      stdout { codec => rubydebug }
    }

> 从redis输出到es

input \{  
redis \{  
data\_type => “list”  
type => “redis-input”  
key => “logstash:redis”  
host => “192.168.212.37”  
port => 6379  
threads => 5  
codec => “json”  
\}  
\}  
output \{  
elasticsearch \{  
hosts => “192.168.212.37:9201”  
index => “logstash-test”  
\}  
stdout \{  
codec => rubydebug \{\}  
\}  
\}

教程：[https://www.cnblogs.com/oliver-blogs/p/7844226.html][https_www.cnblogs.com_oliver-blogs_p_7844226.html]

[https_www.jianshu.com_p_18074e1e719f]: https://www.jianshu.com/p/18074e1e719f
[https_blog.csdn.net_ywheel1989_article_details_60519151]: https://blog.csdn.net/ywheel1989/article/details/60519151
[https_www.cnblogs.com_oliver-blogs_p_7844226.html]: https://www.cnblogs.com/oliver-blogs/p/7844226.html