weixin_42562106的博客

【代码】EFK收集K8S日志。

打印出2点30分至2点45分的时间端日志，cat access.log | egrep “06/Dec/2018” | sed -n ‘/14:30:00/,/14:45:00/p’ > /tmp/kkk.txtawk中$3小于等于50，包含了50:01-50:59的日志数据；cat web.log | egrep “01/Apr/2014” | awk -F’:’ ‘$2 = 21 && $3 >= 30 && $3 <= 50'...

yum -y install GeoIP-devel mod_geoip GeoIPyum -y install glib2 glib2-devel ncurses ncurses-devel geoIP geoIP-devel./configure --prefix=/opt/goaccess --enable-utf8 --enable-geoip=legacymake && make installln -s /opt/goaccess/bin/goaccess /usr/lo

为了方便安装使用helm安装helm pull loki/loki-stacktar xf loki-stack-2.1.2.tgzhelm install loki loki-stack/cat<<END> grangfan.yamlapiVersion: apps/v1kind: Deploymentmetadata: name: grafana labels: app: grafanaspec: replicas: 1 selector:

cat /etc/rsyncd.confuid = rootgid = rootuse chroot = nomax connections = 2000timeout = 600pid file = /var/run/rsyncd.pidlock file = /var/run/rsync.locklog file = /var/log/rsyncd.loggnore errorsport = 50005read only = falselist = falseauth use

官方参考安装连接https://github.com/grafana/loki/blob/v1.5.0/docs/installation/docker.mddocker 运行服务端yaml一般使用默认的docker run -d --name loki -v /mnt/config/:/mnt/config -p 3100:3100 grafana/loki:latest -config.file=/mnt/config/loki-config.yaml#只需修改ager端yamldocke

cat log-Pilot.yamlapiVersion: apps/v1kind: DaemonSetmetadata: name: log-pilot labels: app: log-pilot # 设置期望部署的namespace namespace: kube-systemspec: selector: matchLabels: app: log-pilot updateStrategy: type: RollingUpdate