ELK简单部署

系统环境：

IP:192.168.0.156

ruby环境准备

yum -y install ruby-devel ruby-libs ruby-rdoc ruby-ri ruby-static ruby-tcltk rubygem-flexmock rubygem-rake rubygems rubygems-devel ruby

JAVA环境变量设置

tar xzf /soft/jdk-8u77-linux-x64.gz -C /usr/local/

vim /etc/profile

#JAVA evn

export JAVA_HOME=/usr/local/jdk1.8.0_77

#export JAVA_HOME=/usr/local/jdk1.7.0_79

export CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar

export PATH=$JAVA_HOME/bin:$PATH

source /etc/profile

java –version

java version "1.8.0_77"

Java(TM) SE Runtime Environment (build 1.8.0_77-b03)

Java HotSpot(TM) 64-Bit Server VM (build 25.77-b03, mixed mode)

logstash

安装

tar xzf logstash-2.3.2.tar.gz -C /uc/

cd /uc/logstash-2.3.2

测试

bin/logstash -e 'input { stdin { } } output { stdout {} }'

配置

vim /uc/conf/sample.conf

input {

file {

path => "/var/log/httpd/access_log"

start_position => beginning

}

}

filter {

grok {

match => { "message" => "%{COMBINEDAPACHELOG}" }

}

date {

match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]

}

}

output {

elasticsearch{

hosts => [ "127.0.0.1:9200"]

}

#  stdout { codec => json }

stdout { codec => rubydebug }

}

/uc/logstash-2.3.1/bin/logstash -f /uc/conf/sample.conf –t          测试配置文件是否正确

启动

/uc/logstash-2.3.2/bin/logstash -f /uc/conf/sample.conf  &

elasticsearch

安装

tar xzf /soft/ELK/elasticsearch-2.3.3.tar.gz -C /uc/

groupadd elastic

useradd -g elastic search

chown -R search.elastic /uc/elasticsearch-2.3.3/

启动

su – search

启动 pid是一个文件，用于文件关闭elasticsearch程序

touch /uc/pid

/uc/elasticsearch-2.3.3/bin/elasticsearch -p /uc/pid &

关闭

kill -9 `cat /uc/pid/`

配置

vim /uc/elasticsearch-2.3.3/config/elasticsearch.yml

cluster.name: sanm

node.name: node-1

network.host: 127.0.0.1

http.port: 9200

kibana

安装

tar xzf /soft/ELK/kibana-4.5.1-linux-x64.tar.gz -C /uc/

cd /uc/kibana-4.5.1-linux-x64/

配置

vim /uc/kibana-4.5.1-linux-x64/config/kibana.yml

server.port: 5601

server.host: "0.0.0.0"

elasticsearch.url: http://127.0.0.1:9200

kibana.defaultAppId: "discover"

启动

/uc/kibana-4.5.1-linux-x64/bin/kibana &

WEB访问

http://192.168.0.156:5601/