Shulou(Shulou.com)06/03 Report--

Logstash can be understood as the acquisition and transmission component of log.

As usual, the first step is to download

Sudo wget https://artifacts.elastic.co/downloads/logstash/logstash-6.2.4.tar.gz

Decompress it out.

Sudo tar-zxvf logstash-6.2.4.tar.gz

Edit the level of configuration configuration ip and logging

Vi / config/logstash.yml

Http.host: "192.168.209.160"

Log.level: debug

Reference operation

Https://www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html

Start by default

. / bin/logstash

Show empty logstash.yml file, allow me to fix an error

According to configuration referenc

Https://www.elastic.co/guide/en/logstash/current/configuration.html

Touch bin/simple.conf

Vi bin/simple.conf

Input {stdin {}} output {elasticsearch {hosts = > ["localhost:9200"]} stdout {codec = > rubydebug}}

Then read the configuration file when you start up the bin directory. Of course, you can create multiple input input logs in this configuration file.

. / logstash-f logstash.conf

There is still a mistake reported. Let me fix it.

[2018-04-18T18:22:50490] [ERROR] [logstash.config.sourceloader] No configuration found in the configured sources.

Unable to write to directory configuration file? Once you see that the directory permission is root root, hurry up to chown-R pactera logstash-6.2.4.

The authority has been changed.

Tail-f logstash-plain.log

Local port 9200 has been rejected. Let me open an es.

Netstat-lntup

The es of 9200 9300 and the logstash of kibana,9600 of port 5601 are all up.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.