Centos 7.9 安装 ELK8.1.0+MetricBeat

提示：文章写完后，目录可以自动生成，如何生成可参考右边的帮助文档

目录

环境

一、前期准备：

1.下载ELK+MetircBeat rpm包 

2.CentOS 设置 

二、安装Elasticsearch

1.安装rpm

2.配置Elasticsearch

修改配置档

开防火墙

设置账号 

 开启Elasticsearch

 2.验证Elasticsearch

三、安装Kibana

1.安装rpm

2.配置

启动Kibana

无浏览器操作

3.初始化Kibana

4.加载样例数据

四、安装MetricBeat

1.官方流程

2.安装RPM

3.配置

4.启动MetricBeat

五、遇到过的问题

1.Kibana

取token报错 

Kibana Server is not ready yet and Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain

2.MetricBeat

Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://192.168.50.101:9200: Get "https://192.168.50.101:9200": x509: certificate signed by unknown authority]

配置ssl.ca_trusted_fingerprint问题 Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://192.168.50.101:9200: Get "https://192.168.50.101:9200": decode 'ca_trusted_fingerprint': encoding/hex: invalid byte: U+003A ':']

总结

---

环境

Hyper-V + CentOS 7.9

系统：CentOS 7.9 

        下载URL：CentOS Mirrors List

虚拟机：Hyper-V

        开启方式：开始菜单->启用或关闭Windows功能->Hyper-V

        如果无法开启需要根据CPU修改BIOS

        

---

一、前期准备：

1.下载ELK+MetircBeat rpm包 

注意：版本一定要一致，否则平添烦恼

ElasticSearch:Elasticsearch 8.1.0 | Elastichttps://www.elastic.co/cn/downloads/past-releases/elasticsearch-8-1-0

Kibana:Kibana 8.1.0 | Elastichttps://www.elastic.co/cn/downloads/past-releases/kibana-8-1-0

Logstash:Logstash 8.1.0 | Elastichttps://www.elastic.co/cn/downloads/past-releases/logstash-8-1-0

FileBeat:Filebeat 8.1.0 | Elastichttps://www.elastic.co/cn/downloads/past-releases/filebeat-8-1-0

MetricBeat:Metricbeat 8.1.0 | Elastichttps://www.elastic.co/cn/downloads/past-releases/metricbeat-8-1-0选择RPM X86_64,下载后把安装包拷到机器里   

2.CentOS 设置 

vi /etc/sysctl.conf

在末尾加上

vm.max_map_count=262144

---

二、安装Elasticsearch

1.安装rpm

rpm -ivh elasticsearch-8.1.0-x86_64.rpm

 安装完成，执行命令：

systemctl enable elasticsearch #设为开机启动

2.配置Elasticsearch

修改配置档

vi /etc/elasticsearch/elasticsearch.yml

 需要修改的内容：

# 集群名，17行 
cluster.name: my-es
# node名，23行 
node.name: node-1 
# 数据目录，33行 
path.data: /root/data/elasticsearch/data 
# 日志目录，37行 
path.logs: /var/log/elasticsearch 
# 配置IP，55行 
network.host: 192.168.50.101 
# 配置站点端口，59行 
http.port: 9200 

标准如下

开防火墙

9200、9300是es server;5601是kibana

firewall-cmd --permanent --add-port={9200/tcp,9300/tcp,5601/tcp} 
firewall-cmd --reload

效果： 

设置账号