Elasticsearch+kibana+filebeat的安装及使用

版本7.6.0

自己去官网下载或者私信找我要，jdk是8版本

1.ES安装

网上有好多安装教程可以自己去搜索

这个是我的es文件路径：

{

"name" : "node-1",

"cluster_name" : "elasticsearch",

"cluster_uuid" : "NIepktULRfepkje3JHw8NA",

"version" : {

"number" : "7.6.0",

"build_flavor" : "default",

"build_type" : "tar",

"build_hash" : "7f634e9f44834fbc12724506cc1da681b0c3b1e3",

"build_date" : "2020-02-06T00:09:00.449973Z",

"build_snapshot" : false,

"lucene_version" : "8.4.0",

"minimum_wire_compatibility_version" : "6.8.0",

"minimum_index_compatibility_version" : "6.0.0-beta1"

},

"tagline" : "You Know, for Search"

}

安装成功后可以访问： ip+9200(默认端口)

{
  "name" : "node-1",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "NIepktULRfepkje3JHw8NA",
  "version" : {
    "number" : "7.6.0",
    "build_flavor" : "default",
    "build_type" : "tar",
    "build_hash" : "7f634e9f44834fbc12724506cc1da681b0c3b1e3",
    "build_date" : "2020-02-06T00:09:00.449973Z",
    "build_snapshot" : false,
    "lucene_version" : "8.4.0",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}

2.kibana安装

安装链接

3.filebeat

私聊我，问我要安装包

我的日志文件：

配置文件填写:

启动命令：
./filebeat -e -c filebeat.yml &
停止运行 FileBeat 进程    
ps -ef | grep filebeat
Kill -9 线程号
执行完启动命令后，输入  exit就能解决filebeat在后台一直运行

大功告成