Shulou(Shulou.com)06/02 Report--

This article mainly explains "how to build EFK". Interested friends may wish to have a look. The method introduced in this paper is simple, fast and practical. Let Xiaobian take you to learn "EFK's construction method"!

1. Environmental preparation

Centos7.0

jdk1.8

elasticsearch-6.3.2 Download Address

filebeat-6.3.2 Download Address

Kibana-6.3.2 Download Address

PS:EFK versions should be consistent.

2. filebeat installation

Download FileBeat

wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-6.3.2-linux-x86_64.tar.gz

decompression

tar -zxvf filebeat-6.2.4-linux-x86_64.tar.gz Enter the home directory and modify filebeat.ymlfilebeat. detectors:- type: log enabled: true paths: #Log Collection Directory - /var/xxx/*.log multiline.pattern: ^\[ multiline.negate: true multiline.match: aftersetup.kibana: host: "192.168.1.1:5601"output.elasticsearch: hosts: ["192.168.1.1:9200"]

Start filebeat

./ filebeat -e -c filebeat.yml -d "publish"

background starts

nohup ./ filebeat -e -c filebeat.yml > filebeat.log 2>&1 &

3. Kibana installation

Download Kibana

wget https://artifacts.elastic.co/downloads/kibana/kibana-6.3.2-linux-x86_64.tar.gz

decompression

tar -zxvf kibana-6.3.2-linux-x86_64.tar.gz

Go to home directory and modify configuration

vi config/kibana.yml

Add the following configuration or uncomment and modify

server.port: 5601server.host: "0.0.0.0" server.name: "kibana"elasticsearch.url: "http://192.168.18.187:9400"kibana.index: ".kibana"xpack.security.enabled: false#Enter any 32-digit xpack.reporting.encryptionKey: "122334445555566666777777788888"

Elasticsearch.url is Elasticsearch's address, server.host defaults to localhost, localhost can be defaulted if only local access is required, and 0.0.0.0 can be set if external access is required.

Start Kibana

./ bin/kibana &

closed

ps -ef|grep node

Kill -9 port Here, I believe everyone has a deeper understanding of the "EFK construction method". Let's actually operate it! Here is the website, more related content can enter the relevant channels for inquiry, pay attention to us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.