elk全面学习需要看的一些blog

备注：

对于其他人没有借鉴价值，仅供自己学习之用

ELK + Grafana 来分析nginx日志 打造可视化监控（值得看）
https://blog.csdn.net/qq_25934401/article/details/83345144

Using Elasticsearch in Grafana
https://grafana.com/docs/features/datasources/elasticsearch/
在Kibana的visualize中显示Nginx访问日志客户端IP地域分布图
https://www.cnblogs.com/ahaii/p/7410421.html

filebeat-nginx 收集文档
https://www.elastic.co/guide/en/beats/filebeat/6.4/exported-fields-nginx.html

从零进阶–教你如何使用Filebeat实现日志可视化收集
https://blog.51cto.com/xiaozhagn/2306527?source=drh
Grafana elasticsearch 应用
https://www.cnblogs.com/wxwall/p/9642621.html

通过nginx GeoIP模块 限制某些国家地区访问网站
https://yq.aliyun.com/articles/604318

ELK+Filebeat+Nginx集中式日志解决方案（一）
https://cloud.tencent.com/info/8de8f34a9ff30fe6a23e99cb26752c87.html

Filebeat实时收集Nginx日志
http://blog.joylau.cn/2018/05/08/Filebeat-Nginx/

使用Kibana 分析Nginx 日志并在 Dashboard上展示
https://www.cnblogs.com/hanyifeng/p/5860731.html

kibana面板讲解和功能使用说明（二）
https://blog.csdn.net/fxbin123/article/details/79983264

logstash配置文件
https://www.cnblogs.com/xiaobaozi-95/p/9214307.html

Docker ElK安装部署使用教程
https://www.cnblogs.com/soar1688/p/6849183.html

filebeat+elasticsearch+kibana(版本6.4.2)搭建简单的日志收集系统
https://lixiaoxin.iteye.com/blog/2432770

ELK–filebeat详解
https://www.cnblogs.com/kuku0223/p/8316922.html

官方安装插件介绍
https://www.elastic.co/guide/en/elasticsearch/plugins/6.4/ingest-geoip.html

nginx日志格式

 log_format jsonTest '{"@timestamp":"$time_iso8601",'
                  '"host":"$server_addr",'
                  '"service":"nginxTest",'
                  '"trace":"$upstream_http_ctx_transaction_id",'
                  '"log":"log",'
                  '"clientip":"$remote_addr",'
                  '"remote_user":"$remote_user",'
                  '"request":"$request",'
                  '"http_user_agent":"$http_user_agent",'
                  '"size":$body_bytes_sent,'
                  '"responsetime":$request_time,'
                  '"upstreamtime":"$upstream_response_time",'
                  '"upstreamhost":"$upstream_addr",'
                  '"http_host":"$host",'
                  '"url":"$uri",'
                  '"domain":"$host",'
                  '"xff":"$http_x_forwarded_for",'
                  '"referer":"$http_referer",'
                  '"status":"$status"}';
     access_log /var/log/nginx/access.log jsonTest;