JAVA环境:安装jdk并配置环境变量
官方提示需求java8:
Logstash requires Java 8. Java 9 is not supported.
win7安装&配置java8教程:
https://jingyan.baidu.com/article/6b97984dec3bbe1ca3b0bf6a.html
打开cmd输入'java -version'测试
显示类似如下信息表示配置java环境成功:
java version "1.8.0_191"
Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)
1.下载:官网选择zip安装包下载
选择zip包下载
进:https://www.elastic.co/cn/downloads/logstash
或:https://www.elastic.co/downloads/logstash
2.安装:解压logstash-5.6.1.zip到想要目录
不要选择有空格的目录比如C:\Program Files\下,
测试时会报错"找不到或无法加载主类"
提供该报错解决:
https://blog.csdn.net/awj3584/article/details/79715907
3.测试启动:使用控制台输入并输出方式启动
进入安装目录下logstash-5.6.1\bin
shift+鼠标右键选择在'此处打开命令窗口'输入:
logstash -e 'input { stdin { } } output { stdout {} }'
信息报出:'Successfully started Logstash API endpoint {:port=>9600}'
表示启动成功,说明安装成功。
若报错:"ERROR: Unknown command '{'"
应该是win字符集的问题,修改单引号为双引号尝试
logstash -e "input { stdin { } } output { stdout {} }"
4.测试运行:启动之后控制台输入任意字符测试:'xxx'
显示如下信息表示成功运行
{
"@timestamp" => 2018-11-18T08:16:09.963Z,
"message" => "xxx\r",
"host" => "PC-xxxxx",
"@version" => "1"
}
5.退出:ctrl+c
终止批处理操作吗?(Y/N)选择Y
6.输出Elasticsearch测试:
win7系统64位Elasticsearch安装图文教程:
启动命令:
logstash -e "input { stdin { } } output { elasticsearch { hosts => localhost } }"
启动后控制台输入任意字符:'mytest1'
浏览器访问搜索api查看数据
http://localhost:9200/_search?pretty # _search表示查看全部;pretty表示格式化显示
显示类似如下表示成功:
{
_index: "logstash-2018.11.18",
_type: "doc",
_id: "BV8uJmcBqoUH4vydQOoA",
_score: 1,
_source: {
message: "mytest1 ",
host: "PC-xxxxx",
@timestamp: "2018-11-18T09:37:03.255Z",
@version: "1"
}
},