Windows环境下实现SpringBoot整合ELK

下载Elasticsearch、Logstash、Kibana安装包，本文以6.4.0版本为例，下载地址：https://elasticsearch.cn/download/

下载完成后，分别解压

分别启动Elasticsearch、Logstash、Kibana

启动Elasticsearch

可在\elasticsearch-6.4.0\config\elasticsearch.yml配置访问的ip地址和端口：

# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
#network.host: 192.168.0.1
#
# Set a custom port for HTTP:
#
#http.port: 9200

此处不做配置，默认127.0.0.1:9200

在cmd窗口运行\elasticsearch-6.4.0\bin\elasticsearch.bat

在浏览器访问http://127.0.0.1:9200/，返回如下图所示信息

 

启动Logstash

可在\logstash-6.4.0\config\logstash.yml配置访问的ip地址和端口：

# ------------ Metrics Settings --------------
#
# Bind address for the metrics REST endpoint
#
# http.host: "127.0.0.1"
#
# Bind port for the metrics REST endpoint, this option also accept a range
# (9600-9700) and logstash will pick up the first available ports.
#
# http.port: 9600-9700

此处不做配置，默认127.0.0.1:9600

在\logstash-6.4.0\config下添加文件logstash.conf，内容如下：

input {
  tcp {
    mode => "server"
    host => "127.0.0.1"
    port => 4560
    codec => json_lines
  }
}

output {
  elasticsearch {
    hosts => "127.0.0.1:9200"
    index => "logstash-service-%{+YYYY.MM.dd}"
  }
}
 

在\logstash-6.4.0\bin目录下打开cmd窗口，执行logstash.bat -f ../config/logstash.conf

在浏览器访问http://127.0.0.1:9600/，返回如下图所示信息

启动Kibana

可在\kibana-6.4.0-windows-x86_64\config\kibana.yml配置访问的ip地址和端口：

# Kibana is served by a back end server. This setting specifies the port to use.
#server.port: 5601

# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
# The default is 'localhost', which usually means remote machines will not be able to connect.
# To allow connections from remote users, set this parameter to a non-loopback address.
#server.host: "localhost"

此处不做配置，默认127.0.0.1:5601

以及配置elasticsearch访问地址

# The URL of the Elasticsearch instance to use for all your queries.
#elasticsearch.url: "http://localhost:9200"

在cmd窗口运行\kibana-6.4.0-windows-x86_64\bin\kibana.bat

创建springboot工程，新建一个Controller，简单打印一些日志

package com.example.demo.controller;

import lombok.extern.slf4j.Slf4j;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import java.util.Date;

@Slf4j
@RestController
@RequestMapping("/test")
public class TestController {

    @GetMapping("/success")
    public String test (){
        log.info("###test:{}", new Date());
        return "success";
    }

}

引入依赖：

<!--集成logstash-->
<dependency>
    <groupId>net.logstash.logback</groupId>
    <artifactId>logstash-logback-encoder</artifactId>
    <version>5.3</version>
</dependency>
<dependency>
    <groupId>org.projectlombok</groupId>
    <artifactId>lombok</artifactId>
    <optional>true</optional>
</dependency>

resources下添加配置文件logback-spring.xml，内容如下：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE configuration>
<configuration>
    <include resource="org/springframework/boot/logging/logback/defaults.xml"/>
    <include resource="org/springframework/boot/logging/logback/console-appender.xml"/>
    <!--应用名称-->
    <property name="APP_NAME" value="mall-admin"/>
    <!--日志文件保存路径-->
    <property name="LOG_FILE_PATH" value="${LOG_FILE:-${LOG_PATH:-${LOG_TEMP:-${java.io.tmpdir:-/tmp}}}/logs}"/>
    <contextName>${APP_NAME}</contextName>
    <!--每天记录日志到文件appender-->
    <appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender">
        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
            <fileNamePattern>${LOG_FILE_PATH}/${APP_NAME}-%d{yyyy-MM-dd}.log</fileNamePattern>
            <maxHistory>30</maxHistory>
        </rollingPolicy>
        <encoder>
            <pattern>${FILE_LOG_PATTERN}</pattern>
        </encoder>
    </appender>
    <!--输出到logstash的appender-->
    <appender name="LOGSTASH" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
        <!--可以访问的logstash日志收集端口-->
        <destination>127.0.0.1:4560</destination>
        <encoder charset="UTF-8" class="net.logstash.logback.encoder.LogstashEncoder"/>
    </appender>
    <root level="info">
        <appender-ref ref="CONSOLE"/>
        <appender-ref ref="FILE"/>
        <appender-ref ref="LOGSTASH"/>
    </root>
</configuration>

工程目录如图所示：

调用接口，打印几行日志：

在浏览器访问http://127.0.0.1:5601/，返回如下图所示信息：

效果展示：

参考：

https://blog.csdn.net/papima/article/details/90670110

https://blog.csdn.net/weixin_34311210/article/details/113195996

https://blog.csdn.net/weixin_45111741/article/details/109001454