一、Logstash下載
官方網(wǎng)站：https://www.elastic.co/cn/downloads/logstash
本文采用v7.13.2版本
wget https://artifacts.elastic.co/downloads/logstash/logstash-7.13.2-linux-x86_64.tar.gz
二、Logstash安裝與配置
1.解壓并移到指定目錄
tar -zxvf logstash-7.13.2-linux-x86_64.tar.gz
mv logstash-7.13.2 /usr/local
2.在config目錄下新建配置文件logstash.conf，如果實(shí)現(xiàn)logstash與springboot整合，使得springboot程序的log存儲到logstash中并發(fā)送到es中，新建的配置文件可以如下:
input {
tcp {
mode => "server"
host => "0.0.0.0"
port => 4560
codec => json_lines
}
}
output {
elasticsearch {
hosts => "10.27.3.20:9200"
index => "springboot-logstash-%{+YYYY.MM.dd}"
}
}
image.png
- 給用戶賦予權(quán)限 啟動logstash
chown -R elkadmin. /usr/local/logstash-7.13.2/
cd /usr/local/logstash-7.13.2/bin
./logstash -f ../config/logstash.conf &
4.查看啟動日志，沒有報錯信息表示啟動成功
cd /usr/local/logstash-7.13.2/logs
image.png
查看后臺進(jìn)程
ps -ef|grep logstash
image.png
三、配置以systemctl方式管理Logstash
創(chuàng)建注冊服務(wù)文件
vim /usr/lib/systemd/system/logstash.service
文件中加入以下內(nèi)容
[Unit]
Description=logstash
After=network.target
[Service]
Type=simple
User=elkadmin
ExecStart=/usr/local/logstash-7.13.2/bin/logstash -f /usr/local/logstash-7.13.2/config/logstash.conf
PrivateTmp=true
[Install]
WantedBy=multi-user.target
加載配置信息
systemctl daemon-reload
設(shè)置開機(jī)啟動
systemctl enable logstash.service
相關(guān)命令
# 查看服務(wù)狀態(tài)
systemctl status logstash.service
# 啟動服務(wù)
systemctl start logstash.service
# 重啟服務(wù)
systemctl restart logstash.service
# 停止服務(wù)
systemctl stop logstash.service
# 禁止開機(jī)啟動
systemctl disable logstash.service
# 啟用開機(jī)啟動
systemctl enable logstash.service
