ES7 安装
1.解压文件 elasticsearch-7.15.1-windows-x86_64.zip
2.将ES做成服务
cmd 进入bin目录执行命令 elasticsearch-service.bat install
3.任务管理器启动
4.浏览器 访问 http://127.0.0.1:9200
5.远程访问或端口修改
修改config文件夹下的elasticsearch.yml文件内容然后重启(部分设置为Kabana所需设置)
network.host: 0.0.0.0
http.port: 9200
cluster.initial_master_nodes: ["node-1", "node-2"]
http.cors.enabled: true
http.cors.allow-origin: "*"
xpack.security.enabled: false
二,ES-head插件(需要node环境)
1 命令启动:npm start
2.访问 http://127.0.0.1:9100
LogStash使用
1.解压logstash-7.12.1.zip
2.创建配置文件(使用读取log日志文件的方式获取日志信息,与项目解耦)
创建logstash.conf,并放在bin目录中(名称随意,放的路径随意)
配置文件内容自行修改相关配置,示例如下(收集多项目日志推送到不同的es索引)
input {
file {
path => "D:/jmdz/logs/app-log.log"
codec => "json"
type => "applog"
start_position => "beginning"
}
file {
path => "D:/jmdz/logs/fmis-log.log"
codec => "json"
type => "fmislog"
start_position => "beginning"
}
file {
path => "D:/jmdz/logs/weixin-log.log"
codec => "json"
type => "weixinlog"
start_position => "beginning"
}
}
filter {
#过滤器,根据需要填写
}
output {
if [type] == "applog" {
elasticsearch {
action => "index"
hosts => "192.168.1.169:9200"
index => "cangzhou-applog"
}
}
if [type] == "fmislog" {
elasticsearch {
action => "index"
hosts => "192.168.1.169:9200"
index => "cangzhou-fmislog"
}
}
if [type] == "weixinlog" {
elasticsearch {
action => "index"
hosts => "192.168.1.169:9200"
index => "cangzhou-weixinlog"
}
}
}
3启动logstash
logstash -f logstash.conf
Kibana安装
一,解压kibana-7.15.1-windows-x86_64.zip
二,修改配置文件 config文件夹
server.host: "192.168.1.169"
elasticsearch.hosts: ["http://192.168.1.169:9200"]
#汉化
i18n.locale: "zh-CN"
三,启动
bin 目录下 cmd命令 kibana.bat
访问 http://127.0.0.1:5601