ELK（Elasticsearch+Logstash+Kibana）

Posted 2020-12-11 wskxy

一、Elasticsearch 搭建

　　这里三个都选用 6.4.2版本

docker pull elasticsearch:6.4.2
docker run -d --name es -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:6.4.2
#修改配置
docker exec -it es /bin/bash
cd config
vi elasticsearch.yml
    network.bind_host: 0.0.0.0
    http.cors.enabled: true
    http.cors.allow-origin: "*"
exit
#重启看效果
docker restart es 
curl http://192.168.1.189:9200/

二、Logstash

docker pull logstash:6.4.2
docker run --name es_logstash -d --privileged=true logstash:6.4.2
#修改配置
docker exec -it es_logstash /bin/bash
cd config
vi logstash.yml
    http.host: "0.0.0.0"
    xpack.monitoring.elasticsearch.url: http://192.168.1.189:9200
    xpack.monitoring.elasticsearch.username: elastic
    xpack.monitoring.elasticsearch.password: changme

　　然后新增输入输出

cd pipeline
vi logstash.conf

input {
        file {
            codec=> json
                path => "/usr/local/*.json"
        }
}

output {
   elasticsearch{
     hosts=> "http://192.168.1.189:9200"
   }
}

三、Kibana

docker pull kibana:6.4.2
docker run --name es_kibana -p 5601:5601 -d -e ELASTICSEARCH_URL=http://192.168.1.189:9200 kibana:6.4.2

　　貌似run指定后，还是需要修改配置地址的 

vi kibana.yml
elasticsearch.url="http://192.168.1.189:9200"