centralize logging on CentOS 7 using Logstash and Kibana
Centralized logging is useful when trying to identify a problem with a server or application because it allows you to search all logs in a single location. It is also useful because it allows you to identify issues across multiple servers by associating their logs within a specific time frame. This series of tutorials will teach you how to install Lo
your elasticsearch cluster is up and running properly.Installing KIABNAKibana is a WEB interface that provides data analysis for ElasticSearch. It can be used to efficiently search, visualize and analyze logs.First download the latest version of the KIABNA compression package to the official website.You can use the following command to fill in the latest available download links:https://artifacts.elastic.co/downloads/kibana/
Elasticsearch + Logstash + Kibana install X-Pack in the software package,Elasticsearch + Logstash + Kibana install X-Pack
X-Pack is an extension of an Elastic Stack that includes security, alarms, monitoring, reporting, graphics, and machine learning functions in an easy-to-install
This article is a reference to the practice of logstash official documentation. The environment and required components are as follows:
RedHat 5.7 64bit/centos 5.x
JDK 1.6.0 _ 45
Logstash 1.3.2 (with kibana)
Elasticsearch 0.90.10
Redis 2.8.4
The process of building a centralized log analysis platform is as follows:
Elasticsearch
1. Download elasticsearch.
wget https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-0.90.10.
Log System ELK usage (4) -- kibana installation and use, elk -- kibanaOverview
Log System ELK usage (1)-How to UseLog System ELK usage (2)-Logstash Installation and UseLog System ELK usage (III)-elasticsearch InstallationLog System ELK usage (4)-kibana Installation and UseLog System ELK usage (5)-Supplement
This is the last article in this small series. We will see how to
your to easily monitor Elasticsearch through Kibana. You can view cluster health and performance in real time as well as analyze past cluster, index, and node metrics. In addition, you can monitor the performance of Kibana itself. When you install the X-pack on your cluster, the A monitoring agent runs on each node to collect and the index metrics from Elasticse
Elasticsearch, Fluentd and Kibana: Open source log search and visualization schemeOffers: Zstack communityObjectiveThe combination of Elasticsearch, Fluentd and Kibana (EFK) enables the collection, indexing, searching, and visualization of log data. The combination is an alternative to commercial software Splunk: Splunk is free at the start, but charges are required if there is more data.This article descri
index pattern named ' ba* '.
The Logstash data set does contain time-series data, so after clicking Add New to define the index for this data set, make Sure the Index contains time-based events box is checked and select the @timestamp field from the Time-field name drop-do Wn.
The Logstash dataset contains the data for the time series, so after clicking ' Add New ' to define the index for the dataset, make sure that the ' Index contains time-based events ' column is closed from ' Time-field nam
provides data analysis for Elasticsearch. It can be used to efficiently search, visualize, analyze and perform various operations on the log.
2.1 Download kibana-5.4.2*.tar.gz
wget https://artifacts.elastic.co/downloads/kibana/kibana-5.4.2-linux-x86_64.tar.gz
Sha1sum kibana-5.4.2-linux-x86_64.tar.gz
Tar-xzf
path variable is added. After the installation is complete, check: 3.head installation Download Elasticsearch-head : Https://github.com/mobz/elasticsearch-head, unzip after download. Modify Head Source Catalog: C:\elasticsearch-head-master\Gruntfile.js: Find the Connect property below and add hostname: ' * ': 4. Modify the Elasticsearch configuration file To edit C:\elasticsearch-5.5.1\config\config\elasticsearch.yml, add the following: Http.cors.enabled:true Http.cors.allow-origin: "*"
Both the ELK and Shield 2.0+ are installed on 10.100.100.60 server 1, Elasticsearch installed on Shieldbin/plugin installation licensebin/plugin install SHIELD2, run E Lasticsearchbin/elasticsearch3, add an Admin user bin/shield/esusers useradd es_admin-r admin Enter password 123456 login es_admin 123456, You can see all the INDICES4, test whether users write to the page login http://10.100.100.60:9200/need to enter the user name and password es_admin
Elasticsearch Kibana Installation notes
Kibana is a dashboard used for ElasticSearch analysis and query. It is worth noting that Kibana puts the analysis before the query, which is probably distinguished by other clients.
For more information about Kibana, see here.
Install
In linux, The ElasticSearch.6.2.1 and head, Kibana, X-Pack, SQL, IK, and PINYIN plug-ins are configured and installed,1. Install elasticsearch-head1.1 directly using command Installation Error
elasticsearch-6.2.0\bin>elasticsearch-plugin install elasticsearch-headA tool for managing installed elasticsearch pluginsCommands--------list - Lists installed elasticsear
files, forwarding
The operating principle is as follows:
first, the test environment planning diagram
Operating system centos6.5 x86_64
Elk server:192.168.3.17
To avoid interference, turn off the firewall and SELinux
Service Iptables off
Setenforce 0
Three machines need to modify the Hosts file
Cat/etc/hosts
192.168.3.17 elk.chinasoft.com
192.168.3.18 rsyslog.chinasoft.com
192.168.3.13 nginx.chinasoft.com
Modify Host Name:
Hostname elk.chinasoft.com
Mkdir-p/data/elk
.el7_5.1.i686 contains libstdc++.so.6, installed.[[emailprotected] data]# yum install libstdc++-4.8.5-28.el7_5.1.i686Back to execute./kibana is no problem.About the configuration of KibanaIf it is installed on the virtual machine Kibana, want to open the Kibana page on their own windows, you need to change the configur
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.