正常配置elk,百度搜索就行,记录一下再配置logstash的错误。
Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances, you must change the "path.data" setting.
意思是这个实力被启用了,之前运行的instance有缓冲,保存在data里面有.lock文件,删除掉就可以。