Test installation in the latest ELKStack version _ PHP Tutorial

Source: Internet
Author: User
Tags kibana logstash filebeat
Test and install ELKStack in the latest version. Test the latest version of ELKStack. an installation article. let's talk a little bit about it. let's take a look at filebeat1.0.0-rc2logstash2.0.0-1elasticsearch2. 0.0kibana4.2. you can simply test the latest version of ELK Stack.
Let's talk a little bit about it.
First View version
Filebeat1.0.0-rc2 logstash2.0.0-1 elasticsearch2.0.0 kibana4.2

So much content can be summarized as follows:
Glossary

Elasticsearch storage index
Kibana UI
Kibana dashboard visual mind chart
Logstash Input Beats plugin collects events
Elasticsearch output plugin sends transactions
Filebeat log data shipper
Topbeat lightweight server monitoring
Packetbeat online network packet analysis




Architecture




1. client installation


Filebeat architecture




Https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html#filebeat-installation


Install filebeat on the nginx log client


Install filebeat
Curl-L-O https://download.elastic.co/beats/filebeat/filebeat-1.0.0-rc2-x86_64.rpm
Rpm-vi filebeat-1.0.0-rc2-x86_64.rpm
Configure filebeat
/Etc/filebeat. yml


Filebeat configuration:
Filebeat:
Prospectors:
-
Paths:
-"/Var/log/*. log"
Fields:
Type: syslog
Output:
Elasticsearch:
Enabled: true
Hosts: ["http: // localhost: 5043"]


Start filebeat


[Root @ backup01 filebeat] # curl-XPUT 'http: // 192.168.0.58: 9200/_ template/filebeat? Pretty '-d @/etc/filebeat. template. json
{
"Acknowledged": true
}




Topbeat
Https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-getting-started.html


Curl-L-O https://download.elastic.co/beats/topbeat/topbeat-1.0.0-rc2-x86_64.rpm
Rpm-vih topbeat-1.0.0-rc2-x86_64.rpm


Packetbeat
Https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-getting-started.html
Yum install libpcap
Curl-L-O https://download.elastic.co/beats/packetbeat/packetbeat-1.0.0-rc2-x86_64.rpm
Rpm-vi packetbeat-1.0.0-rc2-x86_64.rpm




2. server installation


Install elk
Https://www.elastic.co/guide/en/beats/libbeat/1.0.0-rc2/getting-started.html#logstash-setup


It can analyze logs, monitor server status, and analyze network packets such as http protocol.


Install elasticearch


Yum install java-1.7.0-openjdk
Curl-L-O https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-2.0.0.rpm
Rpm-ivh elasticsearch-2.0.0.rpm


Configure startup
Cat/etc/elasticsearch. yml | grep-Ev "^ $ | ^ #"
Path. data:/data
Path. logs:/data/elklogs
Network. host: 192.168.0.58


Chmod elasticsearch: elasticsearch/data/elasticsearch/-R
Chmod elasticsearch: elasticsearch/data/elklogs/-R


Service elasticsearch start




Test elasticearch
[Root @ localhost ~] # Curl http: // 127.0.0.1: 9200
{
"Name": "Redwing ",
"Cluster_name": "elasticsearch ",
"Version ":{
"Number": "2.0.0 ",
"Build_hash": "de54438d6af8f9340d50c5c786151783ce7d6be5 ",
"Build_timestamp": "2015-10-22T08: 09: 48Z ",
"Build_snapshot": false,
"Inclue_version": "5.2.1"
},
"Tagline": "You Know, for Search"
}




Logstash installation (102.131)


Curl-L-O https://download.elastic.co/logstash/logstash/packages/centos/logstash-2.0.0-1.noarch.rpm
Rpm-ivh logstash-2.0.0-1.noarch.rpm




Logstash configuration
Cat nginxconf. json
Input {
Beats {
Port = & gt; 5044
}
}


Output {
Elasticsearch {
Hosts => "192.168.0.58: 9200"
Sniffing => true
Manage_template => false
Index => "% {[@ metadata] [beat]}-% {+ YYYY. MM. dd }"
Document_type => "% {[@ metadata] [type]}"
}
}




Install kibana


Curl-L-O https://download.elastic.co/kibana/kibana/kibana-4.2.0-linux-x64.tar.gz
Tar xzvf kibana-4.2.0-linux-x64.tar.gz
Cd kibana-4.2.0-linux-x64/
./Bin/kibana


Modify kibana. yml to set the port number, elaticsearch
Music kibana-4.2.0-linux-x64/var/kibana
Nohup/var/kibana/bin/kibana-e http: /// 192.168.0.58: 9200 &


Log [13:14:14. 588] [info] [status] [plugin: kibana] Status changed from uninitialized to green-Ready
Log [13:14:14. 617] [info] [status] [plugin: elasticsearch] Status changed from uninitialized to yellow-Waiting for Elasticsearch
Log [13:14:14. 630] [info] [status] [plugin: kbn_vislib_vis_types] Status changed from uninitialized to green-Ready
Log [13:14:14. 639] [info] [status] [plugin: markdown_vis] Status changed from uninitialized to green-Ready
Log [13:14:14. 646] [info] [status] [plugin: metric_vis] Status changed from uninitialized to green-Ready
Log [13:14:14. 655] [info] [status] [plugin: spyModes] Status changed from uninitialized to green-Ready
Log [13:14:14. 658] [info] [status] [plugin: statusPage] Status changed from uninitialized to green-Ready
Log [13:14:14. 661] [info] [status] [plugin: elasticsearch] Status changed from yellow to green-Kibana index ready
Log [13:14:14. 663] [info] [status] [plugin: table_vis] Status changed from uninitialized to green-Ready
Log [13:14:14. 675] [info] [listening] Server running at http: // 0.0.0.0: 5601




Kibana dashboard loading
Curl-L-O http://download.elastic.co/beats/dashboards/beats-dashboards-1.0.0-rc2.tar.gz
Tar xzvf beats-dashboards-1.0.0-rc2.tar.gz
Cd beats-dashboards-1.0.0-rc2/
./Load. sh


./Load. sh http: // 192.168.0.58: 9200
Curl
Loading search Cache-transactions:
{"_ Index ":". kibana "," _ type ":" search "," _ id ":" Cache-transactions "," _ version ": 1," _ shards ": {" total ": 2, "successful": 1, "failed": 0}, "created": true}
Loading search DB-transactions:
{"_ Index ":". kibana "," _ type ":" search "," _ id ":" DB-transactions "," _ version ": 1," _ shards ": {" total ": 2, "successful": 1, "failed": 0}, "created": true}


The command for testing the index is as follows:
Curl 192.168.0.58: 9200/_ cat/indices
Yellow open. kibana 1 1 93 0 69kb 69kb
Yellow open filebeat-2015.11.18 5 1 4109 0 2.9 mb 2.9 mb
For detailed configuration, refer to configuration
Http://blog.chinaunix.net/uid-25057421-id-5576272.html


Http://www.bkjia.com/PHPjc/1081462.htmlwww.bkjia.comtruehttp://www.bkjia.com/PHPjc/1081462.htmlTechArticleELK Stack the latest version of the test an installation of our nonsense little talk, directly into the subject first look at the version filebeat1.0.0-rc2 logstash2.0.0-1 elasticsearch2.0.0 kibana4.2 so much content can be simple...

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.