ELK之logstash6.5

Posted 2021-01-29 jsonhc

首先安装,这里采用rpm安装:

# rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

 创建repo文件:

[[email protected] logstash]# cat /etc/yum.repos.d/logstash.repo 
[logstash-6.x]
name=Elastic repository for 6.x packages
baseurl=https://artifacts.elastic.co/packages/6.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

 在yum install logstash之前确保已经安装了jdk,也就是确保有java环境:

[[email protected] logstash]# java -version
java version "1.8.0_191"
Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)

# yum install logstash

 查看logstash的配置文件:

[[email protected] logstash]# pwd
/etc/logstash
[[email protected] logstash]# ll
总用量 36
drwxrwxr-x. 2 root root    6 12月 18 06:06 conf.d
-rw-r--r--. 1 root root 1846 12月 18 06:06 jvm.options
-rw-r--r--. 1 root root 4568 12月 18 06:06 log4j2.properties
-rw-r--r--. 1 root root  342 12月 18 06:06 logstash-sample.conf
-rw-r--r--. 1 root root 8194 12月 23 20:32 logstash.yml
-rw-r--r--. 1 root root  285 12月 18 06:06 pipelines.yml
-rw-------. 1 root root 1696 12月 18 06:06 startup.options