Logstash+elasticsearch+kibana Log Server Setup

Official website https://www.elastic.co

Software version: Logstash 2.2.0 all Pluginselasticsearch 2.2.0Kibana 4.4.0

Note: This environment becomes Centos6.5 64 bits, the single machine does the test, the specific configuration is simple.

1.Logstash installation Configuration

Unzip to/usr/local/logstash-2.2.0/

Logstash configuration file:

Vim/usr/local/logstash-2.2.0/etc/agent.conf

Input {file {path = '/usr/local/nginx/logs/access.log ' start_position = beginning}} output {elasticsearch {} stdout {}}

Logstash start
Nohup/usr/local/logstash-2.2.0/bin/logstash-f/usr/local/logstash-2.2.0/etc/agent.conf &

2.Elasticsearch installation Configuration

Unzip to/usr/local/elasticsearch-2.2.0/

Elasticsearch configuration file

Vim/usr/local/elasticsearch-2.2.0/config/elasticsearch.yml

# Set the bind address to a specific IP (IPV4 or IPV6): #network. host:0.0.0.0## set a custom port for HTTP: #http. port:920 0

Elasticsearch start

/usr/local/elasticsearch-2.2.0/bin/elasticsearch–d

3.Kibana installation Configuration

Unzip to/usr/local/kibana-4.4.0-linux-x64/

Kibana configuration file

Vim/usr/local/kibana-4.4.0-linux-x64/config/kibana.yml

# Kibana is served by a back end server. This controls which port to use.server.port:5601# the host to bind the server to.server.host: ' 0.0.0.0 ' # If you are Runni Ng Kibana behind a proxy, and want to mount it at a path,# specify this path here. The basepath can ' t end in a slash.# Server.basepath: "" # of Maximum payload size in bytes on incoming server requests.# s erver.maxpayloadbytes:1048576# the Elasticsearch instance to use for all your Queries.elasticsearch.url: "Http://localho St:9200 "

Kibana start

Nohup/usr/local/kibana-4.4.0-linux-x64/bin/kibana &

Browser access

http://yourhost.com:5601

Logstash+elasticsearch+kibana Log Server Setup