ELK8之日志缓存Redis

_Sunburst

已于 2024-07-23 16:30:27 修改

阅读量875

点赞数 21

分类专栏：运维文章标签：运维 elk redis

于 2024-07-18 15:49:45 首次发布

本文链接：https://blog.youkuaiyun.com/u010554181/article/details/140524983

版权

运维专栏收录该内容

10 篇文章

订阅专栏

ELK8之日志缓存Redis

ELK8部署记录：

ELK-8.14.3日志服务器部署-优快云博客

1.安装redis

yum install redis -y

vim /etc/redis/redis.conf

firewall-cmd --zone=public --add-port=6379/tcp --permanent

systemctl restart firewalld

systemctl start redis

systemctl enable redis

2.设置将日志推送至redis

vim /usr/share/logstash/etc/log_to_redis.conf

input {

        tcp {

                port => "514"

                type => "serverlog"

        }

}



output {

        redis {

                host => "192.168.170.22"

                port => "6379"

                data_type => "list"

                key => "serverlog"

                db => "1"

        }

}

启动logstash将日志推送至redis

/usr/share/logstash/bin/logstash -f /usr/share/logstash/etc/log_to_redis.conf &

在待收集日志的服务器上配置：

vim /etc/rsyslog.conf

3.设置将日志从redis推送至es

vim /usr/share/logstash/etc/redis_to_es.conf

input {

        redis {

                host => "192.168.170.22"

                port => "6379"

                data_type => "list"

                key => "serverlog"

                db => "1"

        }

}



output {

        elasticsearch {

                hosts => "192.168.170.20:9200"

                index => "serverlog_redis-%{+YYYY.MM}"

        }

}