docker中安装elk

雨点打透心脏的1/2处 2023-07-23 03:41 15阅读 0赞

##### 1.安装elk #####

###### 1.1:获取最新的镜像： ######

docker pull sebp/elk

![在这里插入图片描述][20200421140717485.png]

###### 1.2:启动镜像 ######

docker run -d -e ES_JAVA_OPTS="-Xms256m -Xmx256m" -p 5601:5601 -p 5044:5044 -p 9200:9200 -p 9300:9300 -it --restart=always --name elk c21727ae794b

启动后等会可以通过浏览器访问ip:5601及ip:9200查看是否已启动。–restart=always表示自启动  
如出现以下错误：

max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

解决：

## 执行
    sysctl -w vm.max_map_count=262144

编辑/etc/sysctl.conf，在里面加入：`vm.max_map_count=262144`

###### 1.3:修改配置 ######

## 进入容器
    docker exec -it elk /bin/bash
    ## 编辑配置文件
    vim /etc/logstash/conf.d/02-beats-input.conf

编辑的内容如下:

input { 
        tcp { 
            port => 5044
            codec => json_lines
        }
    }
    output{ 
        elasticsearch { 
        hosts => ["localhost:9200"]
        index => "ruizhi-log-%{+YYYY.MM.dd}"
        }
    }

退出后，重启elk`docker restart elk`，访问9200和5601可以看见如下界面:  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70]  
如果希望将页面设置为中文，则在docker中设置kibana.yml中的语言即可。

## 进入elk
    docker exec -it elk /bin/bash
    ## 找到kibana.yml（可以用whereis kibana.yml查询）
    cd /opt/kibana/config
    在yml中加上以下配置：
    i18n.locale: "zh-CN"
    重启即可。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70 1]  
如果进入后，都能正常访问说明正常，此时进入kiban中的manage,创建索引。输入ruizhi-log-\*去匹配，然后点击下一步，选择@timestamp。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70 2]  
如果出现`You'll need to index some data into Elasticsearch before you can create an index pattern`或者输入后下一步为灰，这是因为里面没有数据导致的，在命令行输入一个假的数据即可。

curl -H "Content-Type: application/json" -XPOST 'http://192.168.80.129:9200/ruizhi-log-2020-04-25/test-log' -d '{"code":200,"message":"测试"}'

![在这里插入图片描述][20200425115342167.png]

##### 2.springcloud中配置 #####

###### 2.1 jar包配置 ######

<dependency>
        <groupId>net.logstash.logback</groupId>
         <artifactId>logstash-logback-encoder</artifactId>
         <version>6.1</version>
     </dependency>

###### 2.2 logback.xml配置 ######

<?xml version="1.0" encoding="UTF-8"?>
    <configuration>
        <contextName>ProviderLog</contextName>
        
        
        <property name="LOG_HOME" value="D:/" />
        
        <property name="appName" value="wdnmdService" />
        
        <springProperty scope="context" name="springAppName" source="spring.application.name"/>
        <springProperty scope="context" name="serverPort" source="server.port"/>
        
        <appender name="stash" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
            <destination>192.168.80.129:5044</destination>
            
            
            <encoder class="net.logstash.logback.encoder.LoggingEventCompositeJsonEncoder" >
                
                <providers>
                    
                    
                    
                    
                    
                    
                    
                    
                    <timestamp>
                        <timeZone>UTC</timeZone>
                    </timestamp>
                    <pattern>
                        <pattern>
                            
                            
                            
                            
                            
                            
                            { 
                            "app": "${springAppName}_${serverPort}",
                            "level": "%level",
                            "thread": "%thread",
                            "class": "%logger{40}",
                            "message": "%message"
                            }
                        </pattern>
                    </pattern>
    
                </providers>
            </encoder>
        </appender>
        
        <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
            <encoder class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">
                
                <pattern>%d{ yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{ 50} - %msg%n</pattern>
            </encoder>
        </appender>
        
        <appender name="FILE"  class="ch.qos.logback.core.rolling.RollingFileAppender">
            <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
                
                <FileNamePattern>${LOG_HOME}/system.log.%d{ yyyy-MM-dd}.log</FileNamePattern>
                
                <MaxHistory>30</MaxHistory>
            </rollingPolicy>
            <encoder class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">
                
                <pattern>%d{ yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{ 50} - %msg%n</pattern>
            </encoder>
            
            <triggeringPolicy class="ch.qos.logback.core.rolling.SizeBasedTriggeringPolicy">
                <MaxFileSize>10MB</MaxFileSize>
            </triggeringPolicy>
        </appender>
    
        
        <root level="INFO">
            <appender-ref ref="stash" />
            <appender-ref ref="STDOUT" />
            
        </root>
    </configuration>

###### 2.3 输出日志 ######

import io.swagger.annotations.Api;
    import io.swagger.annotations.ApiOperation;
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.web.bind.annotation.*;
    
    import java.util.List;
    
    /**
     * @Author: 
     * @Date: 2020-03-18 15:05
     * @Description:
     */
    @RestController
    @RequestMapping("/contractInfo")
    @Api(tags = "客户端合同信息-用户信息api")
    public class ContractInfoController { 
    
        Logger logger = LoggerFactory.getLogger("ContractInfoController");
    
        /**
         * 合同信息-分页
         *
         * @param dto 分页需要的参数
         * @return
         */
        @ApiOperation(value = "合同信息分页", httpMethod = "POST")
        @RequestMapping(value = "/pageContractInfo", method = RequestMethod.POST)
        public void pageContractInfo(@RequestBody ContractInfoPageDto dto) { 
            logger.info("分页合同数据");
            logger.info("分页合同请求,数据:" + dto);
        }
    }

配置好启动后就可以http://192.168.80.129:5601/中看见相关日志。(第一次时，需要在Management中的Kibana下的Index patterns添加配置。Index pattern为\*，方式选@timestamp)  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70 3]

[20200421140717485.png]: /images/20230528/6ff81423f50c4fa3bc527cdb0ed20b56.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70]: /images/20230528/652743e587e947d7a63ee36b16f7b1b3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70 1]: /images/20230528/4dd71229aa874303bfc662d65ddd4166.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70 2]: /images/20230528/f8a2ac1ed2a0445f8bc28b36247821fb.png
[20200425115342167.png]: /images/20230528/003fc1d16cd24ff497803591ba4e41d0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dpdGh1Yl8zODkyNDY5NQ_size_16_color_FFFFFF_t_70 3]: /images/20230528/8b8e41f1aa854f358eb31fbf4877755e.png