ELK集群部署(三)

sudo chmod g+rwx /work/elk/elasticsearch/data
sudo chown 1000 /work/elk/elasticsearch/data
​
sudo chmod g+rwx /work/elk/elasticsearch/logs
sudo chown 1000 /work/elk/elasticsearch/logs

/work/elk/elasticsearch/bin/start.sh

mkdir -p /work/elk/kibana/{bin,data,conf,logs}

vim /work/elk/kibana/bin/start.sh

#!/bin/bash
docker run -d -p 5601:5601 --name kibana \
        --restart=always \
        --log-opt max-size=10m \
        -v /etc/localtime:/etc/localtime:ro \
        -v /etc/timezone:/etc/timezone \
        -v /work/elk/kibana/conf/kibana.yml:/usr/share/kibana/config/kibana.yml \
        -v /work/elk/kibana/logs:/var/log/kibana/ \
        kibana:7.5.1

chmod 755 /work/elk/elasticsearch/bin/start.sh

vim /work/elk/kibana/conf/kibana.yml

server.name: kibana
server.host: "0.0.0.0"
elasticsearch.hosts: ["http://172.30.9.227:9200","http://172.30.9.209:9200","http://172.30.9.218:9200"]
logging.dest: /var/log/kibana/kibana.log
i18n.locale: "zh-CN"
xpack.monitoring.ui.container.elasticsearch.enabled: true

/work/elk/kibana/bin/start.sh

mkdir -p /work/elk/logstash/{bin,data,conf,logs}

vim /work/elk/logstash/bin/start.sh

#!/bin/bash
docker run -d -p 5044:5044  --name=logstash  \
        --restart=always \
        --log-opt max-size=10m \
        -v /etc/localtime:/etc/localtime:ro \
        -v /etc/timezone:/etc/timezone \
        -v /work/elk/logstash/conf/logstash.yml:/usr/share/logstash/config/logstash.yml \
        -v /work/elk/logstash/conf/logstash.conf:/usr/share/logstash/pipeline/logstash.conf \
        logstash:7.5.1

chmod 755 /work/elk/logstash/bin/start.sh

vim /work/elk/logstash/conf/logstash.conf

input {
    beats {
        port => "5044"
    }
}
​
filter {
    json {
        source => "message"
        remove_field => ["message"]
    }
}
​
output {
    elasticsearch {
        hosts => ["172.30.9.227:9200","172.30.9.209:9200","172.30.9.218:9200"]
        index => "logstash-%{+yyyy.MM.dd}"
    }
}

vim /work/elk/logstash/conf/logstash.yml

http.host: "0.0.0.0"
xpack.monitoring.elasticsearch.hosts: [ "172.30.9.227:9200","172.30.9.209:9200","172.30.9.218:9200" ]

/work/elk/logstash/bin/start.sh