tips:搭建流程最好按照官网流程进行搭建,因不同版本Logstash方法参数不太一致。
1 下载并解压Logstash
下载地址: https://www.elastic.co/downloads/logstash
#tar -zxvf logstash-5.0.2.tar.gz
2 配置logstash.conf文件
可以参考一下配置代码
# For detail structure of this file
# Set: https://www.elastic.co/guide/en/logstash/current/configuration-file-structure.html
input {
# For detail config for log4j as input,
# See: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-log4j.html
log4j
{
mode => "server"
host => "localhost"
port => 4560
}
}
filter
{
#Only matched data are send to output.
}
output
{
# For detail config for elasticsearch as output,
# See: https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html
elasticsearch
{
action => "index" #The operation on ES
hosts => "localhost:9200" #ElasticSearch host, can be array.
index => "applog" #The index to write data to.
}
}
3 运行启动Logstash
#bin/logstash -f logstash.conf
至此Logstash搭建完毕
上篇 ELK(ElasticSearch, Logstash, Kibana)搭建日志分析平台-Elasticsearch篇