weixin_44736359的博客

遇到的问题：使用下面这命令安装速度及其慢，此时又有准备好的ingest-geoip-6.6.0.zip/usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-geoip解决办法：找一个目录上传ingest-geoip-6.6.0.zip[root@m01 ~]# cd /etc/filebeat/modules.d/[root@m01 modules.d]# lsingest-geoip-6.6.0.zip安装[r

遇到的问题：[root@m01 modules.d]# systemctl start nginxJob for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.原因是开启的端口和docker容器里的端口重复了解决方法：[root@m01 modules.d]#

遇到的问题：[root@m01 modules.d]# tail -f /var/log/filebeat/filebeat2020-07-19T11:29:42.226+0800 ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://10.0.0.51:9200)): Connection marked as failed because the onConnect callback failed:

遇到的问题：[root@m01 modules.d]# tail -f /var/log/filebeat/filebeat2020-07-19T11:28:17.318+0800 ERROR instance/beat.go:911 Exiting: setup.template.name and setup.template.pattern have to be set if index name is modified解决办法：[root@m01 modules.d]# vim /etc/f

遇到的问题：pip install docker-compose出现错误： #include "Python.h" ^ compilation terminated.error: command 'gcc' failed with exit status 1解决方法[root@m01 ~]# yum install -y gcc[root@m01 ~]# yum install -y libffi-devel python-deve

六.收集docker日志1.安装dockerrm -fr /etc/yum.repos.d/local.repocurl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repowget -O /etc/yum.repos.d/docker-ce.repo https://mirrors.ustc.edu.cn/docker-ce/linux/centos/docker-ce.reposed

文章目录一.官方地址二.ELK收集java日志多行匹配模式三.查看一.官方地址https://www.elastic.co/guide/en/beats/filebeat/6.6/multiline-examples.html因为java日志的输出信息非常多，需要将多行拼成一个事件，所以需要多行匹配模式因为elasticsearch本身就是java开发的，所以我们可以直接收集ES的日志二.ELK收集java日志多行匹配模式[root@m01 soft]# systemctl stop tomc

文章目录一.安装tomcat二.启动检查三.访问测试四.修改日志为json格式五.重启确认日志是否为json格式六.filebeat配置一.安装tomcatyum install tomcat tomcat-webapps tomcat-admin-webapps tomcat-docs-webapp tomcat-javadoc -y二.启动检查 systemctl start tomcat systemctl status tomcat[root@m01 soft]# lsof -i:80

文章目录一.ELK介绍二.日志收集分类三.安装部署ELK4.2.4 修改日志为json格式[root@elk-175 ~]# vim /etc/tomcat/server.xml[root@elk-175 ~]# cat -n /etc/tomcat/server.xml137 设置labelslogging设置增加labels.service设置labelslogging设置增加labels.serviceAccess logsSet custom paths for the log