下载地址:Download Logstash Free | Get Started Now | Elastic
1、安装jdk
如启动提示没有jvm环境则需要安装,此处略。
2、安装logstash
rpm -ivh logstash-7.9.3.rpm
目录 | 说明 |
/etc/logstash/logstash.yml | 服务的配置文件。日志,数据目录 |
/etc/logstash/logstash-sample.conf | 书写的logstash的配置文件 |
/etc/logstash/conf.d/ | 书写的logstash的配置文件 |
/etc/logstash/jvm.options | logstash jvm配置 这里可以设置为512m |
input {beats {port => 5044 }
}output {elasticsearch {hosts => ["http://localhost:9200"]index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"#user => "elastic"#password => "changeme"}
}
/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash-stdin-output-es.conf