docker 安装elk

java面试题网站：www.javaoffers.com

es的类型
Elasticsearch -> Indices -> Types -> Documents -> Fields
```bash
es: 日志储存
logstash: 日志收集器
kibana : 日志查询
=============================================================================================================
https://www.docker.elastic.co/   版本选择
下载镜像
docker pull docker.elastic.co/elasticsearch/elasticsearch:6.0.1
启动镜像
docker run --name es -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:6.0.1
#官网安装文档地址 :https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#_pulling_the_image  可以安装最新版本
#版本区别: 注意es版本要和kibana版本对应相同的版本,否则有可能会出现问题(亲测es7和kibana6不能连用).
#访问地址及响应
http://localhost:9200/
{
  "name" : "DaJVs5D",
  "cluster_name" : "docker-cluster",
  "cluster_uuid" : "SB6T_43FTvCcJTAvsPAZ2w",
  "version" : {
    "number" : "6.0.1",
    "build_hash" : "601be4a",
    "build_date" : "2017-12-04T09:29:09.525Z",
    "build_snapshot" : false,
    "lucene_version" : "7.0.1",
    "minimum_wire_compatibility_version" : "5.6.0",
    "minimum_index_compatibility_version" : "5.0.0"
  },
  "tagline" : "You Know, for Search"
}

=============================================================================================================
参考:  https://www.elastic.co/guide/en/kibana/current/docker.html
安装 kibana
#注意es版本要和kibana版本对应相同的版本,否则有可能会出现问题(亲测es7和kibana6不能连用).
docker pull docker.elastic.co/kibana/kibana:6.0.1
docker run  -d --link es容器的name或id:elasticsearch(es别名)  -e "elasticsearch.hosts=http://es地址:9200" --name kibana -p 5601:5601  docker.elastic.co/kibana/kibana:6.0.1
注意: 这里的别名一定要 为 elasticsearch,  因为kibana 内部会访问http://elasticsearch:9200/
访问页面: http://localhost:5601

=============================================================================================================
参考: https://www.cnblogs.com/linjiqin/p/12103645.html
安装logstash
docker pull docker.elastic.co/logstash/logstash:6.0.1
mkdir -p /home/cmj/docker/soft/logstash
cd /home/cmj/docker/soft/logstash
vi logstash.yml 输入下面内容
path.config: /usr/share/logstash/conf.d/*.conf
path.logs: /var/log/logstash

新建 conf.d
cd /home/cmj/docker/soft/logstash
mkdir conf.d/
创建文件test.conf
cd  conf.d/
vi test.conf  内容如下:
input {
    beats {
        port => 4560
        codec => "json"
    }
}

output {
  elasticsearch { hosts => ["http://es地址:9200"] }
  stdout { codec => rubydebug }
}
启动命令:
docker run -it --net=host -p 4560:4560 --name logstash -v /home/cmj/docker/soft/logstash/logstash.yml:/usr/share/logstash/config/logstash.yml -v /home/cmj/docker/soft/logstash/conf.d/:/usr/share/logstash/conf.d/ docker.elastic.co/logstash/logstash:6.0.1