[Logstash] 설치

Linux에 설치하기

들어가기 전

• Logstash는 자바가 먼저 설치되어있어야함

자바 설치

• https://sg-choi.tistory.com/99

logstash 설치 스크립트

• https://www.elastic.co/kr/downloads/logstash

mkdir -p /home/ubuntu/app \
&& cd /home/ubuntu/app \
&& wget https://artifacts.elastic.co/downloads/logstash/logstash-7.9.1.tar.gz \
&& tar xvfz logstash-*.tar.gz \
&& rm logstash-*.tar.gz \
&& ln -s /home/ubuntu/app/logstash* logstash

logstash-test.conf 파일 생성

• 경로 : /home/ubuntu/app/logstash/config/logstash-test.conf

input {
    stdin { }
}

output {
    stdout { }
}

logstash 실행

/home/ubuntu/app/logstash/bin/logstash -f /home/ubuntu/app/logstash/config/logstash-test.conf

확인

• 입력 후 결과값이 반환되는지 확인

Docker로 설치하기

logstash.conf

• 경로 : ./config/logstash.conf

input {
  file {
    path => "/usr/share/logstash/logs/test.log"
    start_position => "beginning"
  }
}

output {
  elasticsearch {
    hosts => ["http://192.168.56.101:9200"]
    index => "test_index_2"
  }
}

logstash.yml

• 경로 : ./config/logstash.yml

# http.host: "0.0.0.0"
# path.logs: /usr/share/logstash/logs
log.level: debug
xpack.monitoring.elasticsearch.hosts: [ "http://192.168.56.101:9200" ]

docker-compose.yml

• 경로 : ./docker-compose.yml

version: "3.3"
services:
  logstash:
    image: logstash:7.6.1
    ports:
      - "5044:5044"
    volumes:
      - ./config/logstash.conf:/usr/share/logstash/pipeline/logstash.conf
      - ./config/logstash.yml:/usr/share/logstash/config/logstash.yml

실행 후 테스트

• 컨테이너 접속 후 아래 명령어로 로그 추가하여 elasticsearch에 데이터를 잘 전달하는지 확인

echo "Hello World" >> /usr/share/logstash/logs/test.log