今天接到公司领导要求, 要求用zabbix能够实时的监控所有服务器的报错报警日志。
但是因为服务器数量较大, 日志量很大, 单独做脚本分析日志来上报的话消耗资源可能会比较大,因此就使用了已经部署了的elk来把错误的日志单独整理上报 ,然后就在网上查询资料找到了ZABBIX+ELK的部署,经过十几个小时的尝试和测试,已经能够成功的监控到错误和告警日志了, 因为部署过程中踩了很多坑, 因此整理整个流程把相关的内容发了这篇博客,给大家借鉴。
安装Jdk:
# tar xf jdk-15_linux-aarch64_bin.tar.gz -C /usr/local/
# mv /usr/local/jdk-15/ /usr/local/jdk-1.8.0
添加环境变量:
# alternatives --install /usr/bin/java java /usr/local/jdk1.8.0/jre/bin/java 3000
# alternatives --install /usr/bin/jar jar /usr/local/jdk1.8.0/bin/jar 3000
# alternatives --install /usr/bin/javac javac /usr/local/jdk1.8.0/bin/javac 3000
# alternatives --install /usr/bin/javaws javaws /usr/local/jdk1.8.0/jre/bin/javaws 3000
# alternatives --set java /usr/local/jdk1.8.0/jre/bin/java
# alternatives --set jar /usr/local/jdk1.8.0/bin/jar
# alternatives --set javac /usr/local/jdk1.8.0/bin/javac
# alternatives --set javaws /usr/local/jdk1.8.0/jre/bin/javaws
查看java版本:
# java -version
java version "1.8.0_131"
Java(TM) SE Runtime Environment (build 1.8.0_131-b11)
Java HotSpot(TM) 64-Bit Server VM (build 25.131-b11, mixed mode)
安装logstash:
文件需在官网下载,并进行解压安装:
https://www.elastic.co/cn/downloads/logstash
# unzip logstash-7.9.2.zip
# mv logstash-7.9.2 /usr/local/logstash
安装 logstash-integration-jdbc、logstash-output-zabbix、logstash-input-beats-master 插件:
# /usr/local/logstash/bin/logstash-plugin install logstash-integration-jdbc
Validating logstash-integration-jdbc
Installing logstash-integration-jdbc
Installation successful
# /usr/local/logstash/bin/logstash-plugin install logstash-output-zabbix
Validating logstash-output-zabbix
Installing logstash-output-zabbix
Installation successful
# wget https://github.com/logstash-plugins/logstash-input-beats/archive/master.zip -O /opt/master.zip
# unzip -d /usr/local/logstash /opt/master.zip
安装elasticsearch:
# yum install elasticsearch-6.6.2.rpm
编辑主配置文件:
# vim /etc/elasticsearch/elasticsearch.yml
cluster.name: my-application #17行
node.name: