elk收集nginx

最新推荐文章于 2024-09-21 22:08:31 发布

weixin_51886593

最新推荐文章于 2024-09-21 22:08:31 发布

阅读量107

点赞数

本文链接：https://blog.youkuaiyun.com/weixin_51886593/article/details/109286799

版权

前提：两台已安装elk的服务器和客户端

客户端
关闭防火墙
systemctl stop firewalld
setenforce 0
编译安装nginx
yum -y install gcc gcc-c++ pcre-devel zlib-devel openssl-devel
cd cd nginx-1.19.2/
./configure && make && make install
/usr/local/nginx/sbin/nginx/
chmod -R 777 /usr/local/nginx/logs/
查看nginx日志文件
tailf /usr/local/nginx/logs/access.log
在客户端编写nginx.conf文件
vim /etc/logstash/conf.d/nginx-accesslog.conf
input{
    file {
        path => "/usr/local/nginx/logs/access.log"
        type => "nginx-access-log"
        start_position => "beginning"
        stat_interval => "2"
    }
}
output{
   elasticsearch {
        hosts => ["192.168.81.0:9200"]
        index => "logstash-nginx-access-log-%{+YYYY.MM.dd}"
   }
   file {
        path => "/tmp/logstash-nginx-access-log-%{+YYYY.MM.dd}"
   }
}
创建nginx日志文件
/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/nginx_access.conf -t
重启logstash
systemctl restart logstash.service