elasticsearch&&logstash安装部署

elasticsearch安装部署

一、安装

https://www.elastic.co/cn/downloads/elasticsearch

从网站中下载安装包上传到linux中并解压

tar -zxvf elasticsearch-7.17.0-linux-x86_64.tar.gz

二、部署配置

添加用户组及用户(出于安全考虑，Elasticsearch默认是不允许使用root账号运行的)

groupadd es
useradd es -g es

更改解压文件用户

 chown -R es:es /app/elasticsearch-7.17.0

将elasticsearch目录下的config中的elasticsearch.yml文件更改配置

node.name: node-1
path.data: /app/elasticsearch-7.17.0/data
path.logs: /app/elasticsearch-7.17.0/logs
network.host: 0.0.0.0
http.port: 9200
cluster.initial_master_nodes: ["node-1"]

三、启动es、测试

切换到es用户启动elasticsearch

su es
cd /app/elasticsearch-7.17.0/bin
 ./elasticsearch -d

logstash安装部署

一、安装

https://www.elastic.co/fr/downloads/logstash

从网站中下载安装包上传到linux中并解压

tar -zxvf logstash-7.17.0-linux-x86_64.tar.gz

二、部署配置

# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.

input {
  beats {
    port => 5044
  }
}

output {
  elasticsearch {
    hosts => ["http://localhost:9200"]
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
    #user => "elastic"
    #password => "changeme"
  }
}

三、启动logstash、测试

到bin目录下启动

cd logstash-7.17.0/bin
 ./logstash -f ../config/logstash-sample.conf

测试

logger -T -P 514 -n 172.16.28.129 'Hello,World!'