1、拉取镜像
docker pull logstash
2、编辑logstash.yml配置文件
logstash.yml配置文件放在宿主机/mnt/sdc/logstash目录下,内容如下:
path.config: /usr/share/logstash/conf.d/*.conf
path.logs: /var/log/logstash
3、在/mnt/sdc/logstash/conf下创建logstash-mylog.conf文件:
input {
kafka {
bootstrap_servers => "ip:port"
topics => ["my_log"]
}
}
output {
stdout { codec => rubydebug }
elasticsearch {
hosts => ["ip:port"]
index => "my_log"
}
}
4、启动logstash
docker run -d --restart=always --log-driver json-file --log-opt max-size=100m --log-opt max-file=2 -p 5044:5044 --name logstash -v /mnt/sdc/logstash/logstash.yml:/usr/share/logstash/config/logstash.yml -v /mnt/sdc/logstash/conf.d/:/usr/share/logstash/conf.d/ logstash