ELK快速搭建教程

ELK是什么

• E: elasticsearch
• L: logstash
• K: kibana

资源下载

链接：https://pan.baidu.com/s/1cs54SshXveG68IGW3FXSWQ
提取码：pk9s

本教程统一采用的6.6.2版本，其余版本安装类似

安装Elasticsearch

1. 在服务器上新建一个名为ELK的目录

mkdir /opt/ELK

2. 将安装包放到服务器上到 /opt/ELK目录下
3. 解压这三个文件

cd /opt/ELK
tar -xvzf logstash-6.6.2.tar.gz
tar -xvzf kibana-6.6.2-linux-x86_64.tar.gz
tar -xvzf elasticsearch-6.6.2.tar.gz

4. 进入elasticsearch-6.6.2

cd /opt/ELK/elasticsearch-6.6.2/
mkdir data logs

5. 修改elasticsearch-6.6.2/config/elasticsearch.yml

node.name: node-1
path.data: /opt/ELK/elasticsearch-6.6.2/data
path.logs: /opt/ELK/elasticsearch-6.6.2/logs
bootstrap.memory_lock: true
network.host: 0.0.0.0
http.port: 9200
discovery.zen.ping.unicast.hosts: ["127.0.0.1"]

http.cors.enabled: true
http.cors.allow-origin: "*"

6. 启动elasticsearch-6.6.2

 /opt/ELK/elasticsearch-6.6.2/bin/elasticsearch -d

7. 验证是否安装成功

 curl 'http://localhost:9200/_search?pretty'

安装Logstash

1. 进入logstash-6.6.2

cd /opt/ELK/logstash-6.6.2

2. 在config目录下新建文件：logstash-gelf.yml

vim config/logstash-gelf.yml

输入以下内容：

input {
    gelf {
        host => "127.0.0.1"
        port => 9500
        use_tcp => true
    }
}
filter {
  mutate {
    lowercase => [ "logger", "level" ]
  }
}
output {
    stdout {
        codec => rubydebug
    }
    elasticsearch {
        hosts => "127.0.0.1:9200"
        index => "logstash1-%{+YYYY.MM.dd}"
    }

}

3. 启动logstash

/opt/ELK/logstash-6.6.2/bin/logstash -f /opt/ELK/logstash-6.6.2/config/logstash-gelf.yml

安装Kibana

1. 进入/kibana-6.6.2-linux-x86_64

cd /opt/ELK/kibana-6.6.2-linux-x86_64

2. 修改config/kibana.yml

vim config/kibana.yml

修改以下内容

# Kibana is served by a back end server. This setting specifies the port to use.
server.port: 5601

# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
# The default is 'localhost', which usually means remote machines will not be able to connect.
# To allow connections from remote users, set this parameter to a non-loopback address.
server.host: "127.0.0.1"

3. 启动kibana

/opt/ELK/kibana-6.6.2-linux-x86_64/bin/kibana

4. 访问浏览器：127.0.0.1:5601，即可看到kibana页面，如图：
   

---

注意：以上启动方式都为非后台启动方式，可以使用nohup后台启动ELK

---

下一篇文章将会介绍，如何将微服务的日志，通过ELK收集到Elasticsearch