ELK(ElasticSearch, Logstash, Kibana)搭建日志分析平台-Logstash篇

ElasticSearch搭建


       tips：搭建流程最好按照官网流程进行搭建，因不同版本Logstash方法参数不太一致。



      1 下载并解压Logstash


           下载地址： https://www.elastic.co/downloads/logstash


           #tar -zxvf logstash-5.0.2.tar.gz

       

       2 配置logstash.conf文件

         可以参考一下配置代码

         # For detail structure of this file
        # Set: https://www.elastic.co/guide/en/logstash/current/configuration-file-structure.html
        input {
          # For detail config for log4j as input, 
          # See: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-log4j.html
          log4j

          {
              mode => "server"
              host => "localhost"
              port => 4560
           }
        }
      

         filter

         {
            #Only matched data are send to output.
         }
        

       output

       {
            # For detail config for elasticsearch as output, 
            # See: https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html
             elasticsearch

            {
                action => "index"          #The operation on ES
                hosts  => "localhost:9200"   #ElasticSearch host, can be array.
                index  => "applog"         #The index to write data to.
             }
         }

       3 运行启动Logstash

    

         #bin/logstash -f logstash.conf

        至此Logstash搭建完毕

         上篇  ELK(ElasticSearch, Logstash, Kibana)搭建日志分析平台-Elasticsearch篇

         下篇  ELK(ElasticSearch, Logstash, Kibana)搭建日志分析平台-Kibana篇