centralize logging on CentOS 7 using Logstash and Kibana
Centralized logging is useful when trying to identify a problem with a server or application because it allows you to search all logs in a single location. It is also useful because it allows you to identify issues across multiple servers by associating their logs within a specific time frame. This series of tutorials will teach you how to install
"After modifying the environment variable file, you need to make the modification take effect with the source command as follows:$ source/etc/environmentTo check if the installation was successful, you can enter the following command to test:$ruby –vAfter confirming that the installation is successful and adding a command link through a command, I am not sure what the purpose of creating these links is, and it should be a convention to follow Ruby's "convention is greater than configuration" pri
Elasticsearch + Logstash + Kibana install X-Pack in the software package,Elasticsearch + Logstash + Kibana install X-Pack
X-Pack is an extension of an Elastic Stack that includes security, alarms, monitoring, reporting, graphics, and machine learning functions in an easy-to-install
command to add command links. Currently, I am not sure what the purpose of creating these links is. According to the ruby "convention is greater than configuration" principle, it should be an agreement. (Keyboardota)$ Sudo ln-S/usr/local/Ruby/bin/Ruby/usr/local/bin/Ruby$ Sudo ln-S/usr/local/Ruby/bin/gem/usr/bin/gem
To put it simply, the specific workflow is that the logstash agent monitors and filters logs, and sends the filtered logs to redis (redi
Install Logstash 2.2.0 and Elasticsearch 2.2.0 on CentOS
This article describes how to install logstash 2.2.0 and elasticsearch 2.2.0. The operating system environment version is CentOS/Linux 2.6.32-504.23.4.el6.x86 _ 64.
JDK installation is required. It is generally available in the operating system. It is only a vers
This article is a reference to the practice of logstash official documentation. The environment and required components are as follows:
RedHat 5.7 64bit/centos 5.x
JDK 1.6.0 _ 45
Logstash 1.3.2 (with kibana)
Elasticsearch 0.90.10
Redis 2.8.4
The process of building a centralized log analysis platform is as follows:
Elasticsearch
1. Download elasticsearch.
wget https://download.elasticsearch.org/elast
characters manually and display the characters in the console. The actual situation is not practical ". After that, we will create Elasticsearch to store the log data input to Logstash. If you have not installed Elasticsearch, you can download the RPM/DEB package or manually download the tar package by running the following command:
curl -O https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-1.1.1.tar.gztar zxvf elasticsearch
Windows system:1, installation Logstash1.1 access to the official website Download Zip package[1] https://artifacts.elastic.co/downloads/logstash/logstash-6.3.2.zip 6.3.2 versionif you want to download the latest or other version, you can go to the official website and select the download page[2] https://www.elastic.co/products/logstash
The concept and characteristics of 1.logstash.Concept: Logstash is a tool for data acquisition, processing, and transmission (output).Characteristics:-Centralized processing of all types of data-Normalization of data in different patterns and formats-Rapid expansion of custom log formats-Easily add plugins for custom data sources2.logstash installation configuration.①. Download and
files, forwarding
The operating principle is as follows:
first, the test environment planning diagram
Operating system centos6.5 x86_64
Elk server:192.168.3.17
To avoid interference, turn off the firewall and SELinux
Service Iptables off
Setenforce 0
Three machines need to modify the Hosts file
Cat/etc/hosts
192.168.3.17 elk.chinasoft.com
192.168.3.18 rsyslog.chinasoft.com
192.168.3.13 nginx.chinasoft.com
Modify Host Name:
Hostname elk.chinasoft.com
Mkdir-p/data/elk
/
1
#vim ~/.BASHRC
Append to the bottom of the document
1 2 3 4
Export java_home=/usr/lib/jvm/jdk1.8.0_91 Export Jre_home=${java_home}/JRE export Classpath=.:${java_home}/lib: ${J Re_home}/lib Export Path=${java_home}/bin: $PATH
1
Execution: Source ~/.BASHRC
Execute Java-version and Java, with the corresponding data is installed complete.
2. Install
Environment Support (JAVA)
yum -y install java-1.8*java --version2. Download and decompress logstash
Logstash-5.0.1.tar.gztar-zxvf logstash-5.0.1.tar.gzcd logstash-5.0.1mkdir conf # create conf folder to store configuration file cd conf3. Configuration File
Configure the te
the Logstash, which can be used in production environment;4. Start Logstash4.1 Specify the configuration information of the Logstash with the-e parameter for quick testing and direct output to the screen.#logstash-E "input {stdin{}} output {stdout{}}" My name is Zhengyansheng. Enter it manually, wait 10 seconds to return the result
.
Redis:nosql Database (Key-value), also data lightweight Message Queuing, can not only truncate high concurrency logs but also decouple the entire architecture
Classic framework of traditional elk单一的架构,logstash作为日志搜集器,从数据源采集数据,并对数据进行过滤,格式化处理,然后交由Elasticsearch存储,kibana对日志进行可视化处理。
New Elk FrameFilebeats是一种轻量级的日志搜集器,其不占用系统资源,自出现之后,迅速更新了原有的elk架构。Filebeats将收集到的数据发送给Logstash解析过滤,在Filebeats与
SummaryWhen we use Logsatsh to write the configuration file, if we read too many files, the matching is too much, will make the configuration file hundreds of thousands of lines of code, may cause reading and modification difficulties. At this time, we can put the configuration file input, filter, output in a different configuration file, or even the input, filter, output again separated, put in a different file.At this time, the later need to delete and change the contents of the search, it is
Tags: last issue _id www. field on () useful opening sourceMySQL as a mature and stable data persistence solution, widely used in various fields, but in the data analysis of a little bit, and Elasticsearch as the leader in the field of data analysis, just can compensate for this deficiency, and we need to do is to synchronize the data in MySQL to Elasticsearch, and Logstash just can support, all you need to do is write a configuration fileLogstash get
(a) What is Logstash? Logstash is a distributed Log collection framework, the development language is JRuby, of course, is to interface with the Java platform, but with Ruby syntax is good, very concise and powerful, often with Elasticsearch,kibana configuration, composed of the famous Elk technology stack, Ideal for analysis of log data. Of course it can appear alone, as the log collection software, you ca
Logstash-forwarder (formerly known as Lumberjack) is a log sending end written in the Go language,Mainly for some of the machine performance is insufficient, have the performance OCD patient prepares.main functions :By configuring the trust relationship, the log of the monitored machine is encrypted and sent to Logstash,Reduce the performance of the collected log machine to consume, equivalent to the calcul
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.