Elastic Stack安装 - Filebeat
环境:
OS: Centos 7.6
JDK: 1.8.0_91
下载地址:
https://artifacts.elastic.co/downloads/beats/heartbeat/heartbeat-7.4.2-linux-x86_64.tar.gz
https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.4.2-linux-x86_64.tar.gz
https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-7.4.2-linux-x86_64.tar.gz
https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.4.2-linux-x86_64.tar.gz
https://artifacts.elastic.co/downloads/logstash/logstash-7.4.2.tar.gz
https://artifacts.elastic.co/downloads/kibana/kibana-7.4.2-linux-x86_64.tar.gz
https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.4.2-linux-x86_64.tar.gz
安装Filebeat
tar -xzvf filebeat-7.4.2-linux-x86_64.tar.gz
cd filebeat-7.4.2-linux-x86_64/
vim filebeat.yml
# 配置如下信息
filebeat.inputs:
- type: log
enabled: true
paths:
- /var/log/*.log
multiline.pattern: "^[0-9]{4}-[0-9]{2}-[0-9]{2}"
multiline.negate: true
multiline.match: after
multiline.timeout: 10s
output.elasticsearch:
hosts: ["myEShost:9200"]
setup.kibana:
host: "mykibanahost:5601"
# setup dashboards
./filebeat setup --dashboards
# 启动
./filebeat -e -c filebeat.yml -d "publish"
要了解关于安装和配置其他Beat的更多信息,请参阅入门文档:
Elastic Beats | To capture |
---|---|
Auditbeat | Audit data |
Filebeat | Log files |
Heartbeat | Availability monitoring |
Metricbeat | Metrics |
Packetbeat | Network traffic |
Winlogbeat | Windows event logs |