rabbitmq 安装运行
docker pull rabbitmq:management
docker run -d -it --name rabbit --hostname rabbit -p 5672:5672 -p 15672:15672 rabbitmq:management
es 安装运行
docker pull elasticsearch:5.1.1
docker run -d -it --name es -p 9200:9200 -p 9300:9300 -e ES_JAVA_OPTS="-Xms1024m -Xmx1024m" elasticsearch:5.1.1
Elk 安装可能出现的错误:
- max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144];
- 永久修改:
vi /etc/sysctl.conf
vm.max_map_count=262144
; - 临时修改:
sysctl -w vm.max_map_count=262144
安装启动kibana
docker run -d -it --name kibana --link es:elasticsearch -p 5601:5601 kibana:5.1.1
安装启动logstash
docker run -d -it logstash:5.1.1 -e 'input { rabbitmq { host => "192.168.10.34" port=> 5672 user => "guest" password => "guest" exchange=> "rabbit.log" exchange_type => "direct" queue => "log_queue" durable => true } } output { elasticsearch { hosts => [ "192.168.10.31:9200" ] } }'