Turn from: http://blog.c1gstudio.com/archives/1765
Logstash + Elasticsearch + kibana+redis+syslog-ng
Elasticsearch is an open source, distributed, restful search engine built on Lucene. Designed for cloud computing, to achieve real-time search, stable, reliable, fast, easy to install and use. Supports the use of JSON for data indexing over HTTP.
Logstash is a platform for application log, event transmission, processing, management, and search. You can
Raspberry Pi on the Cloud (1): Environment preparationRaspberry Pi on the Cloud (2): Uploading sensor data to AWS IoT and leveraging Kibana for presentation1. Sensor installation and configuration 1.1 DHT22 installationThe DHT22 is a temperature and humidity sensor with 3 pins, the first pin on the left (#1) is the 3-5v power supply, the second pin (#2) is connected to the data input pin, and the rightmost pin (#4) is grounded.The Raspberry Pi 3B has
{ get; set; } [FieldOrder(7)] public IActivity Activity { get; set; } [FieldOrder(8)] public string EnvironmentName => Environment.MachineName;}Based on business development:public class LatencyEvent : LogEventBase{ [FieldOrder(9)] public long Latency { get; set; } [FieldOrder(10)] public string SearchId { get; set; }}public class SearchEvent : LogEventBase{ [FieldOrder(9)] public string SearchId { get; set; } [FieldOrder(10)] public string SearchString { get
http://nkcoder.github.io/blog/20141106/elkr-log-platform-deploy-ha/
1. Architecture for highly available scenarios
In the previous article using Elasticsearch+logstash+kibana+redis to build a log management service describes the overall framework of log services and the deployment of various components, this article mainly discusses the Log service framework of high-availability scenarios, mainly from the following three aspects of consideration: As
Introduction: Mainly on the three Linux servers, cluster installation elasticsearch.6.2.1, and its ES plug-ins, a variety of management software 1. cluster installation es 1.1 environment
Domain IP
biluos.com 192.168.10.173
biluos1.com
Song Yi, let me have 12 minutes. No matter whether you know the world or not, it will not let you go. Even if you fall to the bottom of the ground, Beijing Evergrande Qisheng Technology Co., Ltd., even if you feel that you are innocent, no one will
SummaryWhen we use Logsatsh to write the configuration file, if we read too many files, the matching is too much, will make the configuration file hundreds of thousands of lines of code, may cause reading and modification difficulties. At this time,
Lucene provides a rich API to mix and customize the queries you need, and you can use the powerful query syntax parsing provided by query parser to construct the query you want. This article introduces the query syntax of Lucene in detail. Parse a
find logs on multiple machines from one window. The user action itself is like a log on your machine, and the search command is the same. It is dedicated to make log management simple, easy to use, and elegant to handle. And it's not too expensive.DisadvantagesPT is a text-based format. If you need to support advanced integration, forecasting, and reporting capabilities, you're out of your league.Splunk>stormThis is Splunk's brother, hosted on a Splunk
important information, it is still using the traditional method, to log on to a machine to view. It seems that the traditional tools and methods have become very clumsy and inefficient. As a result, some smart people put forward a centralized approach to integrating data from different sources into one place.
A complete centralized log system is inseparable from the following key features. Collection-capable of capturing log data from multiple sources-can reliably transfer logs to a central sys
Log Management Log Management tool: Collect, Parse, visualize
Elasticsearch-a Lucene-based document store that is used primarily for log indexing, storage, and analysis.
FLUENTD-Log collection and issuance
Flume-Distributed Log collection and aggregation system
GRAYLOG2-Pluggable log and event Analysis server with alarm options
Heka-Stream processing system, which can be used for log aggregation
Kibana-Visualizing log and timestamp data
Logstash-Tools
90% of big data is machine data. In addition to traditional IT data from servers, storage, and networks, a large amount of unstructured data from the mobile Internet and IOT are also machine data. Compared with database data, machine big data features a large volume, fast growth, high complexity, and diversity, but its value density is slightly lower.
Splunk is a company dedicated to processing machine data. Since becoming the first public company in
, Spark, and parquet; Apache Kiji: A framework for real-time data acquisition and analysis based on HBase; Apache Nutch: Open source web crawler; Apache Oodt: For capturing, processing, and sharing data in NASA's scientific archives; Apache Tika: Content Analytics Toolkit; Argus: Time series monitoring and alarm platform; countly: Mobile and network analytics platform based on node. JS and MongoDB, open source; Domino: Run, plan, share, and deploy models-no infrastructure; Eclipse BIRT:
Objective:Elk is mainly a combination of 3 software, mainly Elasticsearch search engine, Logstash is a log collection log, Kibana real-time analysis to show.[about the Log collection software, such as: Scribe,flume,heka,logstash,chukwa,fluentd, of course rsyslog rsyslog-ng can be collected.About log phone after storage software, such as: Hdfs,cassandra MongoDB, Redis,elasticsearch.About log analysis software such as to use HDFs can write MapReduce ana
Nodejs
NPM install installation environment
Logstash log analysis and graphical display
Small search engines and graphical display
Ruby-developed tools are encapsulated into jar packages in the Java environment.
Logstash Analysis
Read logs from the back to the front in real time
Elastic search Storage
Kibana web page
Java-jar logstash-1.3.2-flatjar.jar agent-F logstash. conf -- web
Http: // 192.168.1.17: 9292/index.html #/dashboa
Many blogs have detailed explanations on the elk theory and architecture diagram. This article mainly records the simple setup and Application of elk.
Preparations before installation
1. Environment Description:
IP
Host Name
Deployment Service
10.0.0.101 (centos7)
Test101
JDK, elasticsearch, logstash, kibana, and filebeat (filebeat is used to test and collect the messages logs of the test101 server itself)
10
ELK StackELK stack is also a combination of three open source software, the formation of a powerful real-time log collection analysis and display system.
Logstash: Log Collection tool, from local disk, network services (their own listening port, accept user log), Message Queuing to collect a variety of logs, and then filter analysis, and input the log into the Elasticsearch.
Elasticsearch: Log Distributed Storage/search tool, native support cluster function, can generate a log of the specified
ELK deployment reference
Brief Introduction:
ELK is composed of three open-source tools:
Elasticsearch is an open-source distributed search engine that features: distributed, zero-configuration, automatic discovery, automatic index sharding, index copy mechanism, restful APIs, and multiple data sources, automatically search for loads.
Logstash is a fully open-source tool that collects, filters, and stores your logs for future use (such as searching ).
Kibana
what elk is.
Elk is an abbreviation for three applications of Elasticsearch, Logstash, and Kibana. Elasticsearch abbreviation ES, mainly used to store and retrieve data. Logstash is primarily used to write data into ES. Kibana is mainly used to display data Elk System Architecture Diagram
Elasticsearch
Elasticsearch is a distributed, real-time, Full-text search engine. All operations are implemented throu
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.