logstash
1.官网下载包
https://www.elastic.co/cn/downloads
2.解压并修改配置文件
tar -zxvf logstash-7.10.2.tar.gz -C /opt
3.拷贝文件
cd /opt/logstash-7.10.2/config
cp logstash-sample.conf logstash.conf
4.修改配置
vim logstash.conf
# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.
input {
file {
path => "/usr/local/logs/*.log"
start_position => "beginning"
}
}
output {
stdout {
codec => rubydebug
#user => "elastic"
#password => "changeme"
}
}
5.配置jdk环境
tar -zxvf jdk-13.0.2_linux-x64_bin.tar.gz
ln -s jdk-13.0.2_linux-x64_bin.tar.gz java
vim /etc/profile
export JAVA_HOME=/usr/local/java
export PATH=$JAVA_HOME/bin:$PATH
重新载入
source /etc/profile
6.启动
/opt/logstash-7.10.2/bin/logstash -f ../conf/logstash.conf
7.测试
mkdir -p /usr/local/logs
echo "logstash正在测试" >> index.log
docker安装
1.拉取镜像
docker pull logstash:7.10.2
2.复制之前容器配置
docker cp dockername:/usr/share/logstash/config /etc/logstash/config
3.新建容器
docker run -di --name=mylogstash -v /data/logstash/config:/usr/share/logstash/pipeline logstash:7.10.2