安装下载地址https://elasticsearch.cn/download/
rpm --install filebeat-7.7.0-x86_64.rpm
vim /etc/filebeat/filebeat.yml
启动、停止、查询状态
systemctl start filebeat.service
systemctl stop filebeat.service
systemctl status filebeat.service
kibana中查询filebeat采集到的数据