logstash及kibana安装

1、logstash安装

下载地址 https://www.elastic.co/cn/downloads/past-releases

1.1、环境准备

1.1.1 安装jdk

root@logstash-node1:~# tar xf jdk-8u301-linux-x64.tar.gz -C /usr/local/
root@logstash-node1:~# ln -sv /usr/local/jdk1.8.0_301 /usr/local/jdk
'/usr/local/jdk' -> '/usr/local/jdk1.8.0_301'
root@logstash-node1:~# ln -sv /usr/local/jdk/bin/java /usr/bin/
'/usr/bin/java' -> '/usr/local/jdk/bin/java'
root@logstash-node1:~# vim /etc/profile
export JAVA_HOME=/usr/local/jdk 
export CLASSPATH=.:$JAVA_HOME/jre/lib/rt.jar:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar 
export PATH=$PATH:$JAVA_HOME/bin
root@logstash-node1:~# source /etc/profile
root@logstash-node1:~# java -version
java version "1.8.0_301"
Java(TM) SE Runtime Environment (build 1.8.0_301-b09)
Java HotSpot(TM) 64-Bit Server VM (build 25.301-b09, mixed mode)

1.2、安装logstash

1.2.1 下载安装

#下载logstash
root@logstash-node1:~# wget https://artifacts.elastic.co/downloads/logstash/logstash-7.9.3.deb
root@logstash-node1:~# dpkg -i logstash-7.9.3.deb 

1.2.2 验证测试

测试标准输入和输出

root@logstash-node1:~# /usr/share/logstash/bin/logstash -e 'input { stdin{} } output { stdout{ codec => rubydebug }}' #标准输入和输出
#输入hello测试
hello
{
       "message" => "hello",
      "@version" => "1",
    "@timestamp" => 2022-04-12T08:30:25.213Z,
          "host" => "logstash-node1"
}

测试输出到文件

root@logstash-node1:~# /usr/share/logstash/bin/logstash -e 'input { stdin{} } output { file { path => "/tmp/log-%{+YYYY.MM.dd}messages.gz"}}'
hello
[INFO ] 2022-04-12 16:33:15.259 [[main]>worker0] file - Opening file {:path=>"/tmp/log-2022.04.12messages.gz"}

#查看文件内容
root@logstash-node1:~# cat /tmp/log-2022.04.12messages.gz 
{"@version":"1","@timestamp":"2022-04-12T08:33:14.986Z","host":"logstash-node1","message":"hello"}

测试输出到 elasticsearch

root@logstash-node1:~# /usr/share/logstash/bin/logstash -e 'input { stdin{} } output { elasticsearch {hosts => ["10.10.100.120:9200"] index => "mytest-%{+YYYY.MM.dd}" }}'
hello

查看es索引

2、安装kibana

#下载
root@es-node1:~# wget https://artifacts.elastic.co/downloads/kibana/kibana-7.9.3-amd64.deb
#安装
root@es-node1:~# dpkg -i kibana-7.9.3-amd64.deb

#修改配置文件
root@es-node1:~# grep "^[^#]" /etc/kibana/kibana.yml 
server.port: 5601
server.host: "10.10.100.110"
elasticsearch.hosts: ["http://10.10.100.120:9200"]
i18n.locale: "zh-CN"
root@es-node1:~# systemctl start kibana
root@es-node1:~# systemctl enable kibana

访问查看

访问地址 ip:5601