Kibana - filebeat getting started

Step 

1

Download and install Filebeat

First time using Filebeat? See the Getting Started Guide.

Copy snippet

curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.0.0-x86_64.rpm
sudo rpm -vi filebeat-7.0.0-x86_64.rpm

Looking for the 32-bit packages? See the Download page.

Step 

2

Edit the configuration

Modify /etc/filebeat/filebeat.yml to set the connection information:

Copy snippet

output.elasticsearch:
  hosts: ["<es_url>"]
  username: "elastic"
  password: "<password>"
setup.kibana:
  host: "<kibana_url>"

Where <password> is the password of the elastic user, <es_url> is the URL of Elasticsearch, and <kibana_url> is the URL of Kibana.

Step 

3

Enable and configure the logstash module

Copy snippet

sudo filebeat modules enable logstash

Modify the settings in the /etc/filebeat/modules.d/logstash.yml file.

Step 

4

Start Filebeat

The setup command loads the Kibana dashboards. If the dashboards are already set up, omit this command.

Copy snippet

sudo filebeat setup
sudo service filebeat start

Incomplete Step 

Module status

Check that data is received from the Filebeat logstash module

Check data

Original url: Access,refreshInterval:(pause:!t,value:0),time:(from:now%2Fw,to:now%2Fw)))
Created at: 2019-04-29 22:21:04
Category: default
Tags: none

未标明原创文章均为采集，版权归作者所有，转载无需和我联系，请注明原出处，南摩阿彌陀佛，知识，不只知道，要得到

请先后发表评论
  • 最新评论
  • 总共0条评论