docker 安装 elasticsearch kibana logstash elasticsearch-ik （elk）

一、elasticsearch安装

下载镜像，查看

docker pull elasticsearch:7.17.3
docker images

创建使用的目录和权限

cd /home/docker
mkdir elk
cd elk/
mkdir config data logs plugins
chmod 777 config data logs plugins
cd config
vi elasticsearch.yml

elasticsearch.yml 配置

#elasticsearch 7.17.3
http.cors.enabled: true
http.cors.allow-origin: "*"
network.host: 0.0.0.0
network.publish_host: 192.168.124.80
http.port: 9200
transport.tcp.port: 9300

xpack.security.enabled: true
xpack.license.self_generated.type: basic
xpack.security.transport.ssl.enabled: true


#elasticsearch 8.11.1
#http.host: 0.0.0.0
#http.cors.enabled: true
#http.cors.allow-origin: "*"
#xpack.security.enabled: false 
#xpack.security.transport.ssl.enabled: false
#xpack.security.enrollment.enabled: true

启动elasticsearch

docker run --name elasticsearch -p 9200:9200 -p 9300:9300  -e "discovery.type=single-node" -e ES_JAVA_OPTS="-Xms256m -Xmx512m" -v /home/docker/elk/es/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml -v /home/docker/elk/es/data:/usr/share/elasticsearch/data -v /home/docker/elk/es/plugins:/usr/share/elasticsearch/plugins -d elasticsearch:7.17.3

查看状态

docker ps -a

查看日志

docker logs elasticsearch

访问

http://192.168.124.80:9200/

进入容器

docker exec -it elasticsearch /bin/bash

设置密码

../bin/elasticsearch-setup-passwords interactive

重启elasticsearch

exit;
docker restart elasticsearch

二、安装kibana

下载kibana

docker pull kibana:7.17.3
docker images

配置

cd /home/docker/elk/
mkdir kibana
cd kibana
mkdir config
chmod 777 config
vi config/kibana.yml

kinaba.yml内容

server.port: 5601
server.host: "0.0.0.0"
elasticsearch.hosts: ["http://192.168.124.80:9200"]
elasticsearch.username: "elastic"
elasticsearch.password: "123456"
i18n.locale: "zh-CN"

启动

docker run -d --name=kibana --restart=always -p 5601:5601 -v /home/docker/elk/kibana/config/kibana.yml:/usr/share/kibana/config/kibana.yml kibana:7.17.3

查看状态和日志

docker ps -a
docker logs kibana

访问

http://192.168.124.80:5601/app/home#/

三、elasticsearch-ik 分词器安装

下载包

https://github.com/medcl/elasticsearch-analysis-ik/releases/tag/v7.17.3

安装

docker exec -it elasticsearch bash
cd /usr/share/elasticsearch/plugins
mkdir ik
cd ik/
cp /home/packages/elasticsearch-analysis-ik-7.17.3.zip ./
unzip elasticsearch-analysis-ik-7.17.3.zip
rm elasticsearch-analysis-ik-7.17.3.zip
cd /home/docker/
chmod 777 -R elk

重启 elasticsearch

docker restart elasticsearch