在CentOS上集成Filebeat和Kibana通常涉及以下几个步骤:
安装Elastic Stack:
安装Filebeat:
sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch
sudo tee /etc/yum.repos.d/elasticsearch.repo <<EOF
[elasticsearch-7.x]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
EOF
sudo yum install filebeat
配置Filebeat:
/etc/filebeat/filebeat.yml
,设置输出到Elasticsearch或Logstash。filebeat.inputs:
- type: log
enabled: true
paths:
- /var/log/*.log
output.elasticsearch:
hosts: ["localhost:9200"]
hosts
参数。启动并启用Filebeat服务:
sudo systemctl start filebeat
sudo systemctl enable filebeat
安装Kibana:
sudo tee /etc/yum.repos.d/kibana.repo <<EOF
[kibana-7.x]
name=Kibana repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
EOF
sudo yum install kibana
配置Kibana:
/etc/kibana/kibana.yml
,设置连接到Elasticsearch的地址。server.host: "0.0.0.0"
elasticsearch.hosts: ["http://localhost:9200"]
启动并启用Kibana服务:
sudo systemctl start kibana
sudo systemctl enable kibana
访问Kibana:
http://<your_server_ip>:5601
,你应该能够看到Kibana的界面。验证集成:
请确保在安装和配置过程中检查Elastic官方文档,因为可能会有更新或特定的安装要求。此外,如果你的Elasticsearch集群启用了安全特性(如X-Pack),则需要确保Filebeat和Kibana也配置了相应的安全设置。