ELK日志收集平台搭建手把手教（二）

日志收集平台搭建手把手教

安装elastisearch

1、创建下面的文件夹

mkdir -p /home/elk/es/config
mkdir -p /home/elk/es/data
mkdir -p /home/elk/esugins

2、启动一个elasticsearch，把配置文件拷贝到宿主机

docker run --name es1 -p 9200:9200 -p 9300:9300 -d elasticsearch:7.17.9
docker cp es1:/usr/share/elasticsearch/config /home/elk/es/

修改配置文件 /home/elk/es/config/elasticsearch.yml

cluster.name: "my-es"
network.host: 0.0.0.0
http.port: 9200
http.host: 0.0.0.0
xpack.security.enabled: true

配置好文件后将es1删除，之后在重新创建es1

[elk@192 config]$ docker stop es1
es1
[elk@192 config]$ docker rm es1
es1

3、重新创建es1

docker run --name es1 -p 9200:9200 -p 9300:9300 \
--net=elknet \
-e "discovery.type=single-node" \
-e ES_JAVA_OPTS="-Xms64m -Xmx128m" \
-v /home/elk/es/config/:/usr/share/elasticsearch/config/ \
-v /home/elk/es/data:/usr/share/elasticsearch/data \
-v /home/elk/es/plugins:/usr/share/elasticsearch/plugins \
-d elasticsearch:7.17.9

docker start es1

4、访问宿主机的9200端口(http://ip:9200),说明elasticsearch部署成功

5、登录es1给elasticSearch设置账号，这里要一起设置6个用户的密码

[elk@192 config]$ docker exec -it es1 /bin/bash
root@e7dc26cb8255:/usr/share/elasticsearch# ./bin/elasticsearch-setup-passwords interactive
Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y


Enter password for [elastic]: 
Reenter password for [elastic]: 
Enter password for [apm_system]: 
Reenter password for [apm_system]: 
Enter password for [kibana_system]: 
Reenter password for [kibana_system]: 
Enter password for [logstash_system]: 
Reenter password for [logstash_system]: 
Enter password for [beats_system]: 
Reenter password for [beats_system]: 
Enter password for [remote_monitoring_user]: 
Reenter password for [remote_monitoring_user]: 
Changed password for user [apm_system]
Changed password for user [kibana_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]

在登录界面输入设置好的elastic及其密码登录，即可证明elastic正确安装成功

{
  "name" : "e7dc26cb8255",
  "cluster_name" : "docker-cluster",
  "cluster_uuid" : "TGalrBIyTUObFFAZ8d-7TA",
  "version" : {
    "number" : "7.17.9",
    "build_flavor" : "default",
    "build_type" : "docker",
    "build_hash" : "ef48222227ee6b9e70e502f0f0daa52435ee634d",
    "build_date" : "2023-01-31T05:34:43.305517834Z",
    "build_snapshot" : false,
    "lucene_version" : "8.11.1",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}

设置自启动

docker update --restart=always es1

转载请注明出处