Ubuntu 18.04搭建Logstash

傷城~ 2023-07-04 03:19 7阅读 0赞

[Ubuntu 18.04 安装ElasticSearch][Ubuntu 18.04 _ElasticSearch]  
[Ubuntu 18.04 搭建Kibana][Ubuntu 18.04 _Kibana]

#### 1、下载安装包 ####

wget https://artifacts.elastic.co/downloads/logstash/logstash-6.2.3.tar.gz
    tar zxvf logstash-6.2.3.tar.gz

#### 2、测试 ####

在logstash安装目录中

./bin/logstash -e 'input { stdin { } } output { stdout {} }'

#### 3、修改配置 ####

在`logstash-6.2.3/config` 目录新建 `log_to_es.conf`，内容如下：

# For detail structure of this file
    # Set: https://www.elastic.co/guide/en/logstash/current/configuration-file-structure.html
    input {
            # For detail config for log4j as input,
            # See: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-log4j.html
            tcp {
                    mode => "server"
                    host => "192.168.xxx.xxx"
                    port => 9250
            }
    }
    filter {
            #Only matched data are send to output.
    }
    output {
            # For detail config for elasticsearch as output,
            # See: https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html
            elasticsearch {
                    action => "index"          #The operation on ES
                    hosts  => "192.168.xxx.xxx:9200"   #ElasticSearch host, can be array.
                    index  => "applog"         #The index to write data to.
            }
    }

其中 `192.168.xxx.xxx:9200` 为 **ElasticSearch** 的地址，请参考 [Ubuntu 18.04 安装ElasticSearch][Ubuntu 18.04 _ElasticSearch]

#### 4、启动 ####

**（1）临时启动**

./bin/logstash -f config/log_to_es.conf

**（2）后台运行守护进程**

./bin/logstash -f config/log_to_es.conf &

#### 5、测试 ####

访问 `http://192.168.xxx.xxx:9200/_search?pretty`  
![在这里插入图片描述][20200207153630118.png]

[Ubuntu 18.04 _ElasticSearch]: https://blog.csdn.net/k_young1997/article/details/104199232
[Ubuntu 18.04 _Kibana]: https://jz-2017.blog.csdn.net/article/details/104215158
[20200207153630118.png]: https://img-blog.csdnimg.cn/20200207153630118.png