centos6 - elk基础入门搭建
|
1
2
3
4
5
6
7
|
[root@host-192-168-53-108 ~]
# rm -rf /etc/yum.repos.d/*
[root@host-192-168-53-108 ~]
# wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
[root@host-192-168-53-108 ~]
# yum clean all
[root@host-192-168-53-108 ~]
# yum -y install java-1.8.0-openjdk*
[root@host-192-168-53-108 ~]
# wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.5.0.rpm
[root@host-192-168-53-108 ~]
# rpm -ivh elasticsearch-5.5.0.rpm
[root@host-192-168-53-108 ~]
# chkconfig --add elasticsearch
|
|
1
2
|
[root@host-192-168-53-108 ~]
# cat /etc/hosts
192.168.53.108 elk1
|
|
1
2
3
4
5
6
7
8
9
|
[root@host-192-168-53-108 ~]
# cat /etc/elasticsearch/elasticsearch.yml
node.name: elk1
network.host: 192.168.53.108
http.port: 9200
bootstrap.memory_lock:
false
bootstrap.system_call_filter:
false
discovery.zen.
ping
.unicast.hosts: [elk1]
http.cors.enabled:
true
http.cors.allow-origin:
"*"
|
|
1
2
3
4
|
[root@host-192-168-53-108 ~]
# cat /etc/elasticsearch/jvm.options | grep -v '^#' | grep -v ^$
#修改
-Xms6g
-Xmx6g
|
|
1
2
3
4
5
|
[root@host-192-168-53-108 ~]
# vim /etc/security/limits.conf
* soft nofile 1000000
* hard nofile 1000000
* soft nproc 1000000
* hard nproc 1000000
|
|
1
2
3
|
[root@host-192-168-53-108 ~]
# cat /etc/security/limits.d/90-nproc.conf
* soft nproc 100000
root soft nproc unlimited
|
|
1
2
3
4
5
6
|
[root@host-192-168-53-108 ~]
# cd /usr/local/
[root@host-192-168-53-108
local
]
# git clone git://github.com/mobz/elasticsearch-head.git
[root@host-192-168-53-108
local
]
# wget https://nodejs.org/dist/v8.2.0/node-v8.2.0-linux-x64.tar.gz --no-check-certificate
[root@host-192-168-53-108
local
]
# tar zxf node-v8.2.0-linux-x64.tar.gz
[root@host-192-168-53-108
local
]
# ln -s /usr/local/node-v8.2.0-linux-x64/bin/node /usr/sbin/node
[root@host-192-168-53-108
local
]
# ln -s /usr/local/node-v8.2.0-linux-x64/bin/npm /usr/sbin/npm
|
|
1
2
3
4
5
|
# 设置npm代理镜像
[root@host-192-168-53-108
local
]
# npm config set registry https://registry.npm.taobao.org
[root@host-192-168-53-108
local
]
# npm install -g grunt
[root@host-192-168-53-108
local
]
# ln -s /usr/local/node-v8.2.0-linux-x64/lib/node_modules/grunt/bin/grunt /usr/sbin/grunt
[root@host-192-168-53-108
local
]
# cd elasticsearch-head/
|
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
[root@host-192-168-53-108 elasticsearch-
head
]
# npm install
Error making request.
Error: connect ETIMEDOUT 52.216.1.0:443
at Object.exports._errnoException (util.js:1024:11)
at exports._exceptionWithHostPort (util.js:1047:20)
at TCPConnectWrap.afterConnect [as oncomplete] (net.js:1150:14)
Please report this full log at https:
//github
.com
/Medium/phantomjs
npm WARN elasticsearch-
head
@0.0.0 license should be a valid SPDX license expression
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.1.2 (node_modules
/fsevents
):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform
for
fsevents@1.1.2: wanted {
"os"
:
"darwin"
,
"arch"
:
"any"
} (current: {
"os"
:
"linux"
,
"arch"
:
"x64"
})
npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! phantomjs-prebuilt@2.1.14
install
: `node
install
.js`
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the phantomjs-prebuilt@2.1.14
install
script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.
npm ERR! A complete log of this run can be found
in
:
npm ERR!
/root/
.npm
/_logs/2017-07-26T11_29_47_063Z-debug
.log
|
|
1
2
|
[root@host-192-168-53-108 elasticsearch-
head
]
# npm install phantomjs-prebuilt@2.1.14 --ignore-scripts
[root@host-192-168-53-108 elasticsearch-
head
]
# npm install
|
|
1
2
3
4
|
[root@host-192-168-53-108 elasticsearch-
head
]
# vim /usr/local/elasticsearch-head/_site/app.js
# 把localhost改为ip
this.base_uri = this.config.base_uri || this.prefs.get(
"app-base_uri"
) ||
"http://localhost:9200"
;
this.base_uri = this.config.base_uri || this.prefs.get(
"app-base_uri"
) ||
"http://192.168.53.108:9200"
;
|
|
1
2
3
4
5
6
7
8
9
10
11
|
[root@host-192-168-53-108 elasticsearch-
head
]
# vim /usr/local/elasticsearch-head/Gruntfile.js
connect: {
server: {
options: {
hostname
:
"0.0.0.0"
,
#添加此行
port: 9100,
base:
'.'
,
keepalive:
true
}
}
}
|
|
1
2
3
4
|
[root@host-192-168-53-108 elasticsearch-
head
]
# grunt server &
[root@host-192-168-53-108 elasticsearch-
head
]
# echo "cd /usr/local/elasticsearch-head;grunt server &" >> /etc/rc.local
[root@host-192-168-53-108 elasticsearch-
head
]
# cd
[root@host-192-168-53-108 ~]
# wget https://artifacts.elastic.co/downloads/logstash/logstash-5.5.0.rpm
|
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
[root@host-192-168-53-108 ~]
# vim /etc/logstash/conf.d/system.conf
input {
file
{
path =>
"/var/log/messages"
type
=>
"systemlog"
start_position =>
"beginning"
stat_interval =>
"2"
}
}
output {
elasticsearch {
hosts => [
"192.168.53.108:9200"
]
index =>
"logstash-systemlog-%{+YYYY.MM.dd}"
}
}
|
|
1
|
[root@host-192-168-53-108 ~]
# /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/system.conf
|
|
1
2
|
#在Elasticsearch中查看
# 浏览器访问http://192.168.53.108:9100/ 选择基本查询 搜素
|
|
1
2
|
[root@host-192-168-53-108 ~]
# wget https://artifacts.elastic.co/downloads/kibana/kibana-5.5.0-x86_64.rpm
[root@host-192-168-53-108 ~]
# rpm -ivh kibana-5.5.0-x86_64.rpm
|
|
1
2
3
4
|
[root@host-192-168-53-108 ~]
# cat /etc/kibana/kibana.yml | grep -v '^#' | grep -v ^$
server.port: 5601
server.host:
"0.0.0.0"
elasticsearch.url:
"http://elk1:9200"
|
|
1
2
|
[root@host-192-168-53-108 ~]
# /etc/init.d/kibana start
[root@host-192-168-53-108 ~]
# chkconfig --add kibana
|
本文转自谢无赖51CTO博客，原文链接：http://blog.51cto.com/xieping/1951765 ，如需转载请自行联系原作者
