Rancher部署logstash

首先将数据传给logstash&＃xff0c;它将数据进行过滤和格式化&＃xff08;转成JSON格式&＃xff09;&＃xff0c;然后传给Elasticsearch进行存储、建搜索的索引&＃xff0c;kibana提供前端的页面再进行搜索和图表可视化&＃xff0c;它是调用Elasticsearch的接口返回的数据进行可视化。logstash和Elasticsearch是用Java写的&＃xff0c;kibana使用node.js框架。

下载命令&＃xff1a;

docker pull logstash:7.5.1docker tag logstash:7.5.1 192.168.8.33/public/logstash:v7.5.1docker push 192.168.8.33/public/logstash:v7.5.1

二、创建挂载目录与映射配置文件

2.1 创建配置文件

logstash.yml

http.host: "0.0.0.0"
xpack.monitoring.elasticsearch.hosts: [ "http://192.168.8.31:9200" ]


logstash-sample.conf

# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.input {beats {port &＃61;> 5044}
}output {elasticsearch {hosts &＃61;> ["http://192.168.8.31:9200"]index &＃61;> "%{[&＃64;metadata][beat]}-%{[&＃64;metadata][version]}-%{&＃43;YYYY.MM.dd}"user &＃61;> "elastic"password &＃61;> "elastic"}
}


2.2 配置启动命令

端口
5044
9600


2.3 映射配置文件

先拷贝配置文件出来&＃xff08;rancher无挂载启动&＃xff09;
docker cp 6cb4ee8b251c:/usr/share/logstash/config /data/logstash/

mkdir -p /data/logstash/config
mkdir -p /data/logstash/datachmod -R 777 /data/logstash/config
chmod -R 777 /data/logstash/data/data/logstash/config /usr/share/logstash/config
/data/logstash/data /usr/share/logstash/data/usr/share/logstash/config/logstash-sample.conf logstash-sample.conf
/usr/share/logstash/config/logstash.yml logstash.yml