要確保已經(jīng)安裝了OpenJDK，如果沒有執(zhí)行下面命令

yum install java-1.7.0-openjdk

1、安裝

cd /home
wget -O /home/logstash-7.10.1.tar.gz https://artifacts.elastic.co/downloads/logstash/logstash-7.10.1-linux-x86_64.tar.gz
tar zxvf logstash-7.10.1.tar.gz
rm -rf logstash-7.10.1.tar.gz
mv logstash-7.10.1 logstash
mkdir /etc/logstash
mkdir /var/log/logstash

這是官網(wǎng)地址，可以根據(jù)自己Elaticsearch版本去找地址。
官網(wǎng)地址：https://www.elastic.co/cn/downloads/logstash
這是下載命令

wget https://artifacts.elastic.co/downloads/logstash/logstash-7.10.1-linux-x86_64.tar.gz

2、創(chuàng)建配置文件：（這個路徑與下面步驟的啟動腳本里是對應(yīng)的）

vim /etc/logstash/index.conf

添加如下內(nèi)容：

input {
     file {
          path => "/var/log/messages"
          start_position => "beginning"
          codec => plain {
          charset => "GBK" }
          type => "file"
     }
}

output {
     elasticsearch {
          host => "127.0.0.1"
     }
}

3、插件

cd /home/logstash
bin/plugin install contrib

4、啟動文件

wget -O /etc/init.d/logstash http://update.biglog.org/logstash
chmod +x /etc/init.d/logstash
chkconfig --add logstash 
chkconfig logstash on
service logstash start

5、安裝logstash-input-jdbc插件

yum install gem -y

5.1 替換ruby庫

gem sources --add https://gems.ruby-china.com/ --remove https://rubygems.org/
gem sources -l

5.2 修改配置文件

cd /opt/inst/logstash622/
vi Gemfile
#修改Gemfile文件
#source "https://rubygems.org/"
source "https://gems.ruby-china.com/"

vi Gemfile.lock
#remote: https://rubygems.org/
remote: https://gems.ruby-china.com/

5.3 安裝logstash-input-jdbc
到logstash的bin目錄下運行下面的命令，查看可用的插件

cd bin
./logstash-plugin list --verbose

圖片.png

下載插件

./logstash-plugin install logstash-integration-jdbc

圖片.png