ELK

filebeat 启动调试模式 

./filebeat -c filebeat.yml -e -d "*"

正式启动

nohup ./filebeat -e >/dev/null 2>&1 &

编码对照Log input | Filebeat Reference [8.0] | Elastic

es启动

./elasticsearch -Epath.data=data2 -Epath.logs=log2
./elasticsearch -Epath.data=data3 -Epath.logs=log3

logstash启动

bin/logstash -f first-pipeline.conf --config.test_and_exit

bin/logstash -f first-pipeline.conf --config.reload.automatic

logo