启动ES
docker run -d -p 9200:9200 -p 9300:9300 elasticsearch:2.3.0
docker run -p 5601:5601 -d --name kibana --link desperate_almeida index.tenxcloud.com/docker_library/kibana
启动kibana程序docker run --name kibana -e ELASTICSEARCH_URL=http://10.82.12.93:9200 -p 5601:5601 -d index.tenxcloud.com/docker_library/kibana
编写logstash
docker run -it --rm index.tenxcloud.com/docker_library/logstash logstash -e 'input { stdin { } } filter { kv { source => "message" field_split => "|" value_split => "=" } kv { source => "args" field_split => "&" value_split => "=" } } output { elasticsearch { hosts => ["10.82.12.2:9200"] } stdout { codec => rubydebug } }'