YUM

Download and install the public signing key:

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

Add the following in your /etc/yum.repos.d/ directory in a file with a .repo suffix, for example logstash.repo

[logstash-6.x]
name=Elastic repository for 6.x packages
baseurl=https://artifacts.elastic.co/packages/6.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

And your repository is ready for use. You can install it with:

sudo yum install logstash-6.2.3

logstash 安裝目錄

/usr/share/logstash

logstash 配置文件目錄

[root@localhost logstash]# ls -la
總用量 48
drwxr-xr-x.   3 root root 4096 6月  11 12:58 .
drwxr-xr-x. 140 root root 8192 6月  11 12:58 ..
drwxrwxr-x.   2 root root    6 3月  13 19:55 conf.d
-rw-r--r--.   1 root root 1738 3月  13 19:55 jvm.options
-rw-r--r--.   1 root root 1334 3月  13 19:55 log4j2.properties
-rw-r--r--.   1 root root 6378 6月  11 12:58 logstash.yml
-rw-r--r--.   1 root root 6378 6月  11 12:53 logstash.yml.rpmsave
-rw-r--r--.   1 root root  285 3月  13 19:55 pipelines.yml
-rw-------.   1 root root 1659 3月  13 19:55 startup.options
[root@localhost logstash]# pwd
/etc/logstash
[root@localhost logstash]# 

logstahs 安裝x-pack

[root@localhost bin]# ./logstash-plugin install x-pack
Downloading file: https://artifacts.elastic.co/downloads/logstash-plugins/x-pack/x-pack-6.2.3.zip
Downloading [=============================================================] 100%
Installing file: /tmp/studtmp-10a8d415f2fed511235f7b43a8813e4d398ab28eb2a5ad12daeeaed5cf3c/x-pack-6.2.3.zip
Install successful
[root@localhost bin]# 

開始logstash

systemctl start logstash