一、Heartbeat安装
# 下载
curl -L -O https://artifacts.elastic.co/downloads/beats/heartbeat/heartbeat-7.10.1-x86_64.rpm
# 解压
rpm -vi heartbeat-7.10.1-x86_64.rpm
二、配置heartbeat.yml
vim /etc/heartbeat/heartbeat.yml
heartbeat.monitors:
#监听方法主要有tcp,http,icmp
- type: http
#网址列表
urls: ["http://localhost:9200"]
#执行间隔
schedule: '@every 10s'
#kibana地址
setup.kibana:
host: "localhost:5601"
#写入es地址
output.elasticsearch:
hosts: ["localhost:9200"]
三、运行查看
1.运行
systemctl start heartbeat-elastic
可以看到新的索引生成了
2.加载Kibana模式并查看
可以在Kibana的仪表盘查看,但是需要先进行模式加载
heartbeat setup -e
打开Kibana相应界面,可以看到已经显示了
四、Heartbeat+logstash+es
beat的传输方式都是类似的,多配置详见ELK入门(八)——Logstash多beat配置(以Filebeat、Metricbeat为例)
1.注释elastic输出
2.logstash output设置
3.添加tag "heartbeat"
4.配置logstash
vim /etc/heartbeat/heartbeat.yml
tags: ["heartbeat"]
output.logstash:
# The Logstash hosts
hosts: ["172.31.131.224:5044"]
vim /etc/logstash/conf.d/logstash-sample.conf
input {
beats {
port => 5044
}
}
output {
if "heartbeat" in [tags] {
elasticsearch {
hosts => ["http://172.31.131.224:9200"]
index => "heartbeat-7.10.1-%{+YYYY.MM}"
}
}
}
问题小结
1.Failed to start heartbeat.service: Unit not found
如果直接运行 systemctl start heartbeat,会报这个错误,参见博客ELK入门——解决:Failed to start heartbeat.service: Unit not found
# 2.Overwriting ILM policy is disabled. Set 'setup.ilm.overwrite:true' for enabling
参考博客