安装ELK日志分析系统

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch
配置yum源
[root@instance-3 ~]# more /etc/yum.repos.d/log.repo 
[logstash-7.x]
name=Elastic repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

1
2
3

yum install logstash #安装logstash

rpm -ivh https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.7.0-x86_64.rpm  #安装elasticsearch

1

rpm -ivh https://artifacts.elastic.co/downloads/kibana/kibana-7.7.0-x86_64.rpm #安装kibana

1
2
3
4

vim /etc/elasticsearch/jvm.options
# 根据实际情况修改 jvm内存
-Xms128m
-Xmx256m

1
2
3
4
5

vim /etc/elasticsearch/elasticsearch.yml
node.data : true
network.host: 0.0.0.0
discovery.seed_hosts : ["127.0.0.1"]
cluster.initial_master_nodes : ["instance-3"] #根据自己主机名修改

1
2

vim /etc/kibana/kibana.yml 
server.host: "0.0.0.0" #此host必须修改外部用户将无法访问

1
2

systemctl start elasticsearch 
systemctl start  kibana 

1
2

tail -f /var/log/elasticsearch/elasticsearch.log
tail -f /var/log/kibana/kibana.stdout