Logstash Install

1.下载安装文件

假如我们下载到/opt/elk

wget https: //download.elastic.co/logstash/logstash/logstash-2.3.2.tar.gz

2.解压安装文件

假如我们解压到/opt/elk目录

tar zxvf logstash- 2.3 . 2 .tar.gz

3.增加配置文件

假如配置文件名称为logstash-demo.conf

input {      file {          path =>  "/opt/hiker/log/igoeasy-api/igoeasy-api.log"          start_position => beginning      } } filter {      grok {          match => {  "message"  =>  "%{COMBINEDAPACHELOG}" }      } } output {    elasticsearch { hosts =>  "192.168.1.10:9200" } }

4.启动Logstash

打开/opt/elk/logstash-2.3.2

cd /opt/elk/logstash- 2.3 . 2   #测试配置是否正确 bin/logstash -f logstash-demo.conf --configtest   #启动 bin/logstash -f logstash-demo.conf.conf

 

参考文档：https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html