ELK日志平台搭建，logstash启动报错解决

出现的错误

[elk@logstash bin]$ sudo systemctl status logstash.service 
● logstash.service - logstash
   Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since 三 2020-07-08 19:12:32 CST; 8s ago
  Process: 13572 ExecStart=/usr/local/elkapp/logstash/bin/logstash (code=exited, status=1/FAILURE)
 Main PID: 13572 (code=exited, status=1/FAILURE)

7月 08 19:12:32 logstash systemd[1]: Started logstash.
7月 08 19:12:32 logstash systemd[1]: Starting logstash...
7月 08 19:12:32 logstash systemd[1]: logstash.service: main process exite...RE
7月 08 19:12:32 logstash systemd[1]: Unit logstash.service entered failed...e.
7月 08 19:12:32 logstash systemd[1]: logstash.service failed.
Hint: Some lines were ellipsized, use -l to show in full.

查看系统日志后发现错误原因

[elk@logstash bin]$ tail

Jul  8 19:12:32 localhost systemd: Started logstash.
Jul  8 19:12:32 localhost systemd: Starting logstash...
Jul  8 19:12:32 localhost logstash: could not find java; set JAVA_HOME or ensure java is in PATH
Jul  8 19:12:32 localhost systemd: logstash.service: main process exited, code=exited, status=1/FAILURE
Jul  8 19:12:32 localhost systemd: Unit logstash.service entered failed state.
Jul  8 19:12:32 localhost systemd: logstash.service failed.

原来是设置的Java环境变量，没有被logstash找到
解决办法

[elk@logstash bin]$ sudo vim /usr/local/elkapp/logstash/bin/logstash.lib.sh
setup_java() {
  # set the path to java into JAVACMD which will be picked up by JRuby to launch itself
JAVA_HOME="usr/local/java"

再次启动测试

[elk@logstash bin]$ sudo systemctl status logstash.service 
● logstash.service - logstash
   Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendor preset: disabled)
   Active: active (running) since 三 2020-07-08 19:20:21 CST; 6s ago
 Main PID: 21931 (java)
   CGroup: /system.slice/logstash.service
           └─21931 usr/local/java/bin/java -Xms1g -Xmx1g -XX:+UseConcMarkSwe...

7月 08 19:20:21 logstash systemd[1]: Started logstash.
7月 08 19:20:21 logstash systemd[1]: Starting logstash...
7月 08 19:20:21 logstash logstash[21931]: Java HotSpot(TM) 64-Bit Server V....
7月 08 19:20:25 logstash logstash[21931]: WARNING: An illegal reflective a...d
7月 08 19:20:25 logstash logstash[21931]: WARNING: Illegal reflective acce...)
7月 08 19:20:25 logstash logstash[21931]: WARNING: Please consider reporti...s
7月 08 19:20:25 logstash logstash[21931]: WARNING: Use --illegal-access=wa...s
7月 08 19:20:25 logstash logstash[21931]: WARNING: All illegal access oper...e
Hint: Some lines were ellipsized, use -l to show in full.

完美解决