安裝下載地址https://elasticsearch.cn/download/
rpm --install filebeat-7.7.0-x86_64.rpm
vim /etc/filebeat/filebeat.yml
啓動、停止、查詢狀態
systemctl start filebeat.service
systemctl stop filebeat.service
systemctl status filebeat.service
kibana中查詢filebeat採集到的數據