ELK搭建

最新推荐文章于 2022-04-02 11:20:55 发布

Jarvies_

最新推荐文章于 2022-04-02 11:20:55 发布

阅读量287

点赞数

分类专栏： ELK 文章标签： ELK

ELK 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

参考地址

https://www.cnblogs.com/xiangjun555/articles/10413057.html

#Elasticsearch
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.6.1.tar.gz

#Logstash
wget https://artifacts.elastic.co/downloads/logstash/logstash-6.6.1.tar.gz

#Kibana
wget https://artifacts.elastic.co/downloads/kibana/kibana-6.6.1-linux-x86_64.tar.gz
2.

#安装JDK
yum install java-1.8.0-openjdk.x86_64 -y
#创建普通用户elk
useradd elk
#解压安装包
tar -zxvf elasticsearch-6.6.1.tar.gz -C /opt/tar -zxvf logstash-6.6.1.tar.gz -C /opt/tar -zxvf kibana-6.6.1.tar.gz -C /opt/#创建日志和数据存放目录
mkdir /opt/elasticsearch-6.6.1/data
mkdir /opt/elasticsearch-6.6.1/logs
#修改授权
chown -R elk:elk /opt/chmod 775 -R /opt/
3.

vim /opt/elasticsearch-6.6.1/config/elasticsearch.yml

network.host: 0.0.0.0path.data: /opt/elasticsearch-6.6.1/data
path.logs: /opt/elasticsearch-6.6.1/logs
#为了连接上elasticsearch
http.cors.enabled: truehttp.cors.allow-origin: “*”

vim /etc/security/limits.conf

soft nofile 65536
hard nofile 131072
soft nproc 2048
hard nproc 4096

vim /etc/security/limits.d/20-nproc.conf

```
     soft    nproc     4096
```

vim /etc/sysctl.conf

#虚拟内存的大小
vm.max_map_count=655360#文件打开的最大数目
fs.file-max=655360

sysctl -p

su elk

ES_JAVA_OPTS="-Xms512m -Xmx512m" ./bin/elasticsearch -d

http://IP地址:9200

8.搭建kibana

su elk

nohup /opt/kibana-6.6.1/bin/kibana -H 0.0.0.0 >/opt/kibana-6.6.1/run.log 2>&1 &

http://IP地址:5601

9.搭建logstash

vim /opt/logstash-6.5.3/config/test.conf

input {
tcp {
host => “0.0.0.0”
port => 5044
mode => “server”
tags => [“tags”]
codec => json_lines
type => “log”
}
}
output {
elasticsearch {
hosts => “localhost:9200”
index => “%{[appname]}”
}
}