备注:
对于其他人没有借鉴价值,仅供自己学习之用
ELK + Grafana 来分析nginx日志 打造可视化监控(值得看)
https://blog.csdn.net/qq_25934401/article/details/83345144
Using Elasticsearch in Grafana
https://grafana.com/docs/features/datasources/elasticsearch/
在Kibana的visualize中显示Nginx访问日志客户端IP地域分布图
https://www.cnblogs.com/ahaii/p/7410421.html
filebeat-nginx 收集文档
https://www.elastic.co/guide/en/beats/filebeat/6.4/exported-fields-nginx.html
从零进阶–教你如何使用Filebeat实现日志可视化收集
https://blog.51cto.com/xiaozhagn/2306527?source=drh
Grafana elasticsearch 应用
https://www.cnblogs.com/wxwall/p/9642621.html
通过nginx GeoIP模块 限制某些国家地区访问网站
https://yq.aliyun.com/articles/604318
ELK+Filebeat+Nginx集中式日志解决方案(一)
https://cloud.tencent.com/info/8de8f34a9ff30fe6a23e99cb26752c87.html
Filebeat实时收集Nginx日志
http://blog.joylau.cn/2018/05/08/Filebeat-Nginx/
使用Kibana 分析Nginx 日志并在 Dashboard上展示
https://www.cnblogs.com/hanyifeng/p/5860731.html
kibana面板讲解和功能使用说明(二)
https://blog.csdn.net/fxbin123/article/details/79983264
logstash配置文件
https://www.cnblogs.com/xiaobaozi-95/p/9214307.html
Docker ElK安装部署使用教程
https://www.cnblogs.com/soar1688/p/6849183.html
filebeat+elasticsearch+kibana(版本6.4.2)搭建简单的日志收集系统
https://lixiaoxin.iteye.com/blog/2432770
ELK–filebeat详解
https://www.cnblogs.com/kuku0223/p/8316922.html
官方安装插件介绍
https://www.elastic.co/guide/en/elasticsearch/plugins/6.4/ingest-geoip.html
nginx日志格式
log_format jsonTest '{"@timestamp":"$time_iso8601",'
'"host":"$server_addr",'
'"service":"nginxTest",'
'"trace":"$upstream_http_ctx_transaction_id",'
'"log":"log",'
'"clientip":"$remote_addr",'
'"remote_user":"$remote_user",'
'"request":"$request",'
'"http_user_agent":"$http_user_agent",'
'"size":$body_bytes_sent,'
'"responsetime":$request_time,'
'"upstreamtime":"$upstream_response_time",'
'"upstreamhost":"$upstream_addr",'
'"http_host":"$host",'
'"url":"$uri",'
'"domain":"$host",'
'"xff":"$http_x_forwarded_for",'
'"referer":"$http_referer",'
'"status":"$status"}';
access_log /var/log/nginx/access.log jsonTest;