大道至简之ELKF日志分析搭建

最新推荐文章于 2024-07-17 11:28:19 发布

后端大佬-明哥哥

最新推荐文章于 2024-07-17 11:28:19 发布

阅读量387

点赞数

分类专栏： docker Golang linux 文章标签： elasticsearch docker logstash kibana filebeat

本文链接：https://blog.youkuaiyun.com/qq_45722923/article/details/129857810

版权

本文详细介绍了如何使用docker compose搭建ELKF（Elasticsearch, Logstash, Kibana, Filebeat）日志分析环境。从目录结构、配置文件到Filebeat的设置，再到ELK服务的启动和Kibana中的日志分析，包括创建索引、同步日志等步骤，最终实现通过Kibana实时查看和管理日志。" 109446169,8332255,数字电路模块：边沿检测电路详解,"['数字电路', '硬件设计', '同步器', '信号处理']

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

搭建

目录结构

在这里插入图片描述

docker compose

version: '3.7'

services:
  elasticsearch:
    image: elasticsearch:7.17.9
    container_name: es
    volumes:
      - ./es/plugins:/usr/share/elasticsearch/plugins 
      - ./es/data:/usr/share/elasticsearch/data
      - ./es/logs:/usr/share/elasticsearch/logs
      - ./es/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
    ports:
      - '9200:9200'
      - '9300:9300'
    environment:
      - TZ=Asia/Shanghai
      - 'cluster.name=elasticsearch'
      - 'discovery.type=single-node'
      - 'ES_JAVA_OPTS=-Xms1024m -Xmx1024m'
    networks:
      - elk
    ulimits:
      memlock:
        soft: -1
        hard: -1
    
  logstash:
    image: logstash:7.17.9
    container_name: logstash
    volumes:
      - ./lg/config/pipelines.yml:/usr/share/logstash/config/pipelines.yml
      - ./lg/config/logstash.yml:/usr/share/logstash/config/logstash.yml
      - ./lg/pipeline/logstash.conf:/usr/share/logstash/pipeline/logstash.conf
    ports:
      - 5044:5044
      - 9600:9600
    environment:
      LS_JAVA_OPTS: -Xms1024m -Xmx1024m
      TZ: Asia/Shanghai
    networks:
      - elk
    ulimits:
      memlock:
        soft: -1
        hard: -1

最低0.47元/天解锁文章