Shulou(Shulou.com)06/03 Report--

Download the software package:

Https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.4.1.tar.gzhttps://artifacts.elastic.co/downloads/kibana/kibana-5.4.1-linux-x86_64.tar.gzhttps://artifacts.elastic.co/downloads/logstash/logstash-5.4.1.tar.gzhttps://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.4.1-linux-x86_64.tar.gzhttps://www.elastic.co/cn/downloads/

1. Preparatory work:

Yum install-y java-1.8.0-openjdkhostnamectl set-hostname elk # modify hostname systemctl stop firewalld # close firewalldsetenforce 0tar zxvf elasticsearch-5.4.1.tar.gz & & tar zxvf logstash-5.4.1.tar.gz & & tar zxvf kibana-5.4.1-linux-x86_64.tar.gz mv logstash-5.4.1 / usr/local/logstash mv elasticsearch-5.4.1 / usr/local/ Elasticsearch mv kibana-5.4.1-linux-x86_64 / usr/local/kibana

two。 Install logstash

After decompression, there is no configuration file for logstash. You need to create one manually. I manually created the log.conf in the screenshot above. For testing, only simple standard input and standard output are configured, as shown below:

Input {stdin {}} output {stdout {codec = > rubydebug {}

Try to start logstash and verify whether the configuration is successful. Execute the command under the decompressed directory of logstash:. / bin/logstash-f config/log.conf. The following screenshot indicates that the configuration is successful. Log path, port and other information can also be seen from the startup information.

Enter test hello log casually in the interaction and take a look at the output

3. Install elasticsearch

Yum install-y java-1.8.0-openjdkhostnamectl set-hostname elk # modify hostname systemctl stop firewalld # turn off firewalldsetenforce 0

Edit elasticsearch.yml

Mkdir-p / usr/local/elasticsearch/data / usr/local/elasticsearch/logsuseradd elasticsearchchown-R elasticsearch:elasticsearch / usr/local/elasticsearchecho "vm.max_map_count = 655360" > > / etc/sysctl.conf & & sysctl-p

Edit the / etc/security/limits.conf file and add the following

* soft nofile 65536 * hard nofile 65536 * soft nproc 65536 * hard nproc 65536

Elasticsearch is not available for root user startup, switch to elasticsearch user to run:

Su-elasticsearch cd / usr/local/elasticsearch bin/elasticsearch &

View port snooping information:

View in the browser:

After completing the installation of logstash and elasticsearch, it is time to integrate them. Go back to the logstash configuration file log.conf, and modify the configuration as follows: input or standard input, and add an elasticsearch,hosts configuration elasticsearch address and port to the output:

Input {stdin {} output {elasticsearch {hosts = > "192.168.56.100 elasticsearch 9200" index = > "logstash-test"} stdout {codec = > rubydebug {}

In the process of starting logstash, check and connect the elasticsearch on the output side. After entering the test string, access the api: http://192.168.56.100:9200/logstash-test/_search of elasticsearch (logstash-test is the index index configured in logstash.conf). You can see the following: the I hello 222entered just now can be seen in elasticsearch.

4. Install kibana

Cd / usr/local/kibana/configvi / usr/local/kibana/config/kibana.yml

Go to the config directory of the unzipped directory of kibana, edit kibana.yml,server.port:5601 to release, modify server.host to the installation server of kibana, and configure the path port of elasticsearch

Start: / bin/kibana &

Then enter: Hello kaka,you are the chen in the interaction of logstash

On the web page, you can see:

5. Next, install redis:

What I need is centos 64-bit. I find the source directly and download it to the current directory with wget:

Wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

Then install:

Rpm-ivh epel-release-6-8.noarch.rpm

Third, install redis

Yum install redis

Configure in the configuration file: vi / etc/redis.conf

# bind 127.0.0.1 do not bind loopback address, do not bind or bind LAN IP address port 6379daemonize yesprotected-mode nopidfile / var/run/redis_6379.pidlogfile / var/log/redis/redis.logdbfilename dump.rdbdir / var/lib/redis/

Start redis-server

Redis-server / etc/redis.conf

Redis and ELK have not been successfully docked yet, and will be updated later.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.