EFK日志收集分析系统

https://docs.fluentd.org/v1.0/articles/out_elasticsearch

1.png

cat >> /etc/hosts <
  @type forward
  port 24224


####################################

  @type tail
  path /var/log/httpd/access_log
  pos_file /var/log/td-agent/httpd-access.log.pos
  tag apache.access
  
    @type apache2
  

####################################

  @type stdout

####################################


  @type copy
  
    @type elasticsearch
    host 10.0.0.20
    port 9200
    logstash_format true
    logstash_prefix fluentd-${tag}
    logstash_dateformat %Y%m%d
    include_tag_key true
    type_name access_log
    tag_key @log_name
    flush_interval 1s
  
  
    @type stdout
  


# /etc/init.d/td-agent restart
# yum -y install httpd
# chmod 777 -R /var/log/httpd/
# tail -f /var/log/td-agent/td-agent.log
# curl http://10.0.0.20:9200/_cat/indices?v


Kibana    [master]

# wget https://artifacts.elastic.co/downloads/kibana/kibana-6.3.1-x86_64.rpm
# rpm -ivh kibana-6.3.1-x86_64.rpm

# vim /etc/kibana/kibana.yml
server.port: 5601
server.host: "10.0.0.20"
elasticsearch.url: "http://10.0.0.20:9200"
kibana.index: ".kibana"

# /etc/init.d/kibana restart
# tail -f /var/log/kibana/kibana.stderr

浏览器 http://10.0.0.20:5601/app/kibana#/home?_g=()

2.png

3.png

4.png

5.png

6.png