Logstash Install

1.下载安装文件

假如我们下载到/opt/elk

wget https://download.elastic.co/logstash/logstash/logstash-2.3.2.tar.gz

2.解压安装文件

假如我们解压到/opt/elk目录

tar zxvf logstash-2.3.2.tar.gz

3.增加配置文件

假如配置文件名称为logstash-demo.conf

input {

    file {

        path => "/opt/hiker/log/igoeasy-api/igoeasy-api.log"

        start_position => beginning

    }

}

filter {

    grok {

        match => { "message" => "%{COMBINEDAPACHELOG}"}

    }

}

output {

  elasticsearch { hosts => "192.168.1.10:9200"}

}

4.启动Logstash

打开/opt/elk/logstash-2.3.2

cd /opt/elk/logstash-2.3.2

 

#测试配置是否正确

bin/logstash -f logstash-demo.conf --configtest

 

#启动

bin/logstash -f logstash-demo.conf.conf

 

参考文档：https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html