ELK之topbeat部署

Posted 2020-08-22 Keep Moving

topbeat定期收集系统信息如每个进程信息、负载、内存、磁盘等等，然后将数据发送到elasticsearch进行索引，最后通过kibana进行展示。

下面是具体的安装及配置步骤：

1、安装topbeat

$ tar zxf topbeat-1.3.1-x86_64.tar.gz
$ mv topbeat-1.3.1 topbeat

2、配置topbeat

$ vim topbeat/topbeat.yml #修改如下内容
input:
  # In seconds, defines how often to read server statistics
  period: 10

  # Regular expression to match the processes that are monitored
  # By default, all the processes are monitored
  procs: [".*"]

  # Statistics to collect (all enabled by default)
  stats:
    # per system statistics, by default is true
    system: true

    # per process statistics, by default is true
    process: true

    # file system information, by default is true
    filesystem: true

    # cpu usage per core, by default is false
    cpu_per_core: true

output:

  ### Elasticsearch as output
  elasticsearch:
    hosts: ["ip:9200"]

3、配置elasticsearch模板

$ curl -XPUT \'http://ip:9200/_template/topbeat\' -d@/data/elk/topbeat/topbeat.template.json

4、启动topbeat

$ cd topbeat/
$ nohup ./topbeat &

最后看一下在Kibana中的数据及图表展示：