Linux 安装elasticsearch，kibana，Logstash

原创已于 2023-07-08 14:10:04 修改 · 1.1k 阅读

1 ·

本内容遵循CC 4.0 BY-SA版权协议

标签

#elk

于 2023-07-08 13:45:55 首次发布

ELK 专栏收录该内容

4 篇文章

订阅专栏

本文详细介绍了如何在Linux系统中安装和配置Elasticsearch、Kibana以及Logstash。首先，Elasticsearch安装后需配置并开放9200端口。接着，Kibana安装后需配置并开放5601端口。最后，Logstash的安装同样涉及配置和端口开放，具体为4560端口。通过这些步骤，可以构建完整的ELK日志分析堆栈。

1、Elasticsearch 安装

cd /usr/local

wget \
https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.7-linux-x86_64.tar.gz \
https://artifacts.elastic.co/downloads/kibana/kibana-7.17.7-linux-x86_64.tar.gz \
https://artifacts.elastic.co/downloads/logstash/logstash-7.17.7-linux-x86_64.tar.gz
https://github.com/medcl/elasticsearch-analysis-ik/releases/download/v7.17.7/elasticsearch-analysis-ik-7.17.7.zip

vim /etc/profile

export ES_JAVA_HOME=$JAVA_HOME
export LS_JAVA_HOME=$JAVA_HOME

source /etc/profile

tar -zxvf elasticsearch-7.17.7-linux-x86_64.tar.gz

useradd elk
chown elk:elk -R elasticsearch-7.17.7
echo "elk hard nofile 65536" >> /etc/security/limits.conf
echo "elk soft nofile 65536" >> /etc/security/limits.conf
echo "vm.max_map_count=655360" >> /etc/sysctl.conf
sysctl -p

1、1 Elasticsearch 配置

vim  /usr/local/elasticsearch-7.17.7/config/elasticsearch.yml

cluster.name: test-log
node.name: node-1
network.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["0.0.0.0"]
cluster.initial_master_nodes: ["node-1"]

su elk
cd elasticsearch-7.17.7/
bin/elasticsearch

需在云服务器安全组开放相应端口
输入服务器公网ip:9200
在这里插入图片描述

nohup bin/elasticsearch >> /dev/null &

2、Kibana 安装

cd /usr/local
tar -zxvf kibana-7.17.7-linux-x86_64.tar.gz
chown elk:elk -R kibana-7.17.7-linux-x86_64/

2、1 Kibana 配置

vim  /usr/local/kibana-7.17.7-linux-x86_64/config/kibana.yml

server.host: "0.0.0.0"
elasticsearch.hosts: ["http://服务器公网ip:9200"]
i18n.locale: "zh-CN"

cd kibana-7.17.7-linux-x86_64/
su elk
bin/kibana

需在云服务器安全组开放5601
在这里插入图片描述

nohup bin/kibana >> /dev/null &

3、Logstash 安装

cd /usr/local
tar -zxvf logstash-7.17.7-linux-x86_64.tar.gz
chown elk:elk -R logstash-7.17.7/

3、1 Logstash 配置

vim  /usr/local/logstash-7.17.7/config/logstash.yml

node.name: test-log
path.config: /usr/local/logstash-7.17.7/config/conf/*.conf

vim /usr/local/logstash-7.17.7/config/conf/test-log.conf

input {
  tcp {
    mode => "server"
    port => 4560
  }
}
filter {}
output {
  elasticsearch {
    action => "index"
    hosts  => ["服务器公网ip:9200"]
    index  => "test-log"
  }
}