一、上傳安裝包

二、部署jdk11
參考本文集中《搭建ES7.10.0集群》

三、安裝logstash

rpm -ivh logstash-7.10.0-x86_64.rpm

四、配置logstash服務(wù)

cat > /usr/lib/systemd/system/logstash.service << "EOF"
[Unit]
Description=logstash service

[Service]
Type=simple
User=root
Group=root
Environment=JAVA_HOME
Environment=LS_HOME=/etc/logstash
Environment=LS_SETTINGS_DIR=/etc/logstash/conf.d/
Environment=LS_PIDFILE=/var/run/logstash.pid
Environment=LS_USER=root
Environment=LS_GROUP=root
Environment=LS_GC_LOG_FILE=/etc/logstash/logs/gc.log
Environment=LS_OPEN_FILES=16384
Environment=LS_NICE=19
Environment=SERVICE_NAME=logstash
Environment=SERVICE_DESCRIPTION=logstash_7.10.0
ExecStart=/usr/share/logstash/bin/logstash" --path.settings  "/etc/logstash/conf.d/"
Restart=always
WorkingDirectory=/etc/logstash/
Nice=19
LimitNOFILE=16384

[Install]
WantedBy=multi-user.target
EOF

五、修改jvm

sed -i "s/^-Xms1g/-Xms3g/" /etc/logstash/jvm.options && sed -i "s/^-Xmx1g/-Xmx3g/" /etc/logstash/jvm.options

六、啟動
systemctl start logstash

七、設(shè)置monitory監(jiān)控

echo "xpack.monitoring.enabled: true" >> /etc/logstash/logstash.yml
echo "xpack.monitoring.elasticsearch.hosts: [\"192.168.18.13:9200\"]" >> /etc/logstash/logstash.yml