filebeat安装

cd /usr/local/src/
wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-6.2.1-linux-x86_64.tar.gz
tar zxvf filebeat-6.2.1-linux-x86_64.tar.gz -C /usr/local/src/filebeat/
/usr/local/src/filebeat/	#安装路径
启动脚本：
vim /etc/init.d/filebeat	#service|centos6启动方式
chmod +x /etc/init.d/filebeat
#!/bin/bash
#by xwy
BASEDIR=/usr/local/src/filebeat/
FILEBEATPID=`ps aux |grep "\.\/filebeat\ \-c\ \/usr\/local\/src\/filebeat\/filebeat\.yml" |awk '{print $2}'`
function STATE () {
    NUMBER=`ps aux |grep "\.\/filebeat\ \-c\ \/usr\/local\/src\/filebeat\/filebeat\.yml" |wc -l`
    echo $NUMBER
}
COMMAND () {
    cd $BASEDIR >/dev/null
    nohup ./filebeat -c ${BASEDIR}filebeat.yml &>/dev/null &
    echo -e "\n"
    cd - >/dev/null
    sleep 1
} 
case $1 in
status)         
    if [ $(STATE) -ge 1 ];then
        echo "filebeat is runing!"
    else
        echo "filebeat is not runing!!"
    fi
;;      
start)          
    if [ $(STATE) -ge 1 ];then
        echo "filebeat is runing!"
    else    
	$(COMMAND)
            if [ $(STATE) -ge 1 ];then
                echo "filebeat is runing!"
            elif [ $(STATE) == 0 ];then
                echo "filebeat is not runing!!"
            fi
    fi
;;      
stop)   
    kill -9 $FILEBEATPID
    NEWNUMBER=`ps aux |grep "\.\/filebeat\ \-c\ \/usr\/local\/src\/filebeat\/filebeat\.yml" |wc -l`
    sleep 1         
    if [ $NEWNUMBER == 0 ];then
        echo "filebeat is not runing!!"
    else
        echo "not can stop filebeat!!"
    fi
;;      
restart)
    NEWNUMBER=`ps aux |grep "\.\/filebeat\ \-c\ \/usr\/local\/src\/filebeat\/filebeat\.yml" |wc -l`
    if [ $NEWNUMBER == 0 ];then
        echo "filebeat is not runing!!"
    else
        kill -9 $FILEBEATPID &&cd $BASEDIR >/dev/null
    fi
    $(COMMAND)
    echo "filebeat is runing!"
;;
*)
    echo 'please input (start|stop|status|restart)!!'
esac