Elk+redis的配置

Posted 2020-10-04 零零柒

1.先到网站上下载 https://www.elastic.co/cn/downloads，需要的工具

Elasticsearch，Kibana，Logstash，Filebeat。

先把redis安装好。安装redis略过。

2.主要是每个工具的配置文件：

Elasticsearch 直接解压后启动即可：./bin/elasticsearch

Kibana：修改配置文件elasticsearch的地址，之后启动，./bin/kibana

Filebeat：修改配置文件后，启动为： ./filebeat -e -c filebeat.yml

Logstash：配置文件

input {
  beats {
    port => "5044"
    tags=> "beat"
  }
  redis {
    host => "127.0.0.1"
    port => 6379
    data_type => "list"
    key => "logstash-list"
    tags => "redis"
  }
}
output {
   if "beat" in [tags] and "redis" not in [tags] {
        redis {
                host => "127.0.0.1"
                port  => "6379"
                data_type => "list"
                key => "logstash-list"
         }
   }else {
         elasticsearch { hosts => ["localhost:9200"] }
   }
   stdout { codec => rubydebug }
}

启动为：./bin/logstash -f ./logstash.conf

好了启动之后就可以访问

kibana了默认访问地址是：5061端口