官方介紹:https://www.elastic.co/cn/products/elasticsearch
1、部署環境
1)安裝JDK
2)安裝elasticsearch
ELasticsearch的官方站點:https://artifacts.elastic.co/downloads/elasticsearch/
2、配置文件
下面幾個是最主要的配置文件路徑:
/etc/elasticsearch/elasticsearch.yml # els的配置文件
/etc/elasticsearch/jvm.options # JVM相關的配置,內存大小等等
/etc/elasticsearch/log4j2.properties # 日誌系統定義
/var/lib/elasticsearch # 數據的默認存放位置
若要其他IP訪問,需修改elasticsearch.yml,如下圖:
3、啓動服務
啓動Elasticsearch
systemctl enable elasticsearch.service
systemctl start elasticsearch
或
4、與logstash結合
即把logstash拿到的數據存入elasticsearch
input {
redis {
host => "xxx.xxx.xxx.xxx"
port => 1234
password => "12345678"
db => 1
data_type => "channel"
key => "logstash"
}
}
filter {
}
output {
elasticsearch {
hosts => ["127.0.0.1:9200"]
}
stdout{codec=>rubydebug}
}