ELK记录

Filebeat

./filebeat -e -c filebeat.yml -d "publish"

https://www.elastic.co/guide/en/beats/filebeat/7.8/filebeat-starting.html

Logstash

./logstash -f ../config/logstash-sample.conf  --config.reload.automatic

https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html

格式

2020-07-21 09:15:38,001 INFO [quartzScheduler_Worker-3] c.g.j.modules.quartz.jobs.SampleJob [SampleJob.java : 20] 定时任务! 时间:2020-07-21 09:15:38

%{TIMESTAMP_ISO8601} %{LOGLEVEL:loglevel} \[%{DATA:thread}\] %{JAVACLASS:class} \[%{JAVAFILE:file} (?:: %{BASE10NUM:line})?\] %{GREEDYDATA:msg}

elasticsearch

查看索引信息

curl -XGET 'http://localhost:9200/_cluster/health?pretty=true'

查看所有索引状态

curl 'localhost:9200/_cat/indices?v'

删除索引

curl -XDELETE http://localhost:9200/index_namee

https://www.cnblogs.com/zhangb8042/articles/11346085.html

nohup ./kibana >/dev/null 2>&1 &

nohup ./elasticsearch >/dev/null 2>&1 &

nohup ./logstash -f ../config/logstash-sample.conf --config.reload.automatic >/dev/null 2>&1 &