Linux下安装ELK
安装 elasticsearch
下载镜像
docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:7.17.0
运行
docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:7.17.0
检测是否启动成功，注意开启防火墙的端口(9200,9300)限制
浏览器访问 ip:9200，响应为
{
"name" : "adfd092fcbb6",
"cluster_name" : "docker-cluster",
"cluster_uuid" : "QYlWm28zSpCE39liFBr37g",
"version" : {
"number" : "7.17.0",
"build_flavor" : "default",
"build_type" : "docker",
"build_hash" : "bee86328705acaa9a6daede7140defd4d9ec56bd",
"build_date" : "2022-01-28T08:36:04.875279988Z",
"build_snapshot" : false,
"lucene_version" : "8.11.1",
"minimum_wire_compatibility_version" : "6.8.0",
"minimum_index_compatibility_version" : "6.0.0-beta1"
},
"tagline" : "You Know, for Search"
}
修改配置
# 进入docker容器
docker exec -it elasticsearch /bin/bash
cd config
# 修改配置文件
vi elasticsearch.yml
# 增加下面两项，如果不添加以下两项，elasticsearch-head连接不了
http.cors.enabled: true
http.cors.allow-origin: "*"
# 重启 es 容器
docker restart elasticsearch
如果容器内不能编辑，就先拷贝出来
docker cp elasticsearch:/usr/share/elasticsearch/config/elasticsearch.yml .
docker cp elasticsearch.yml elasticsearch:/usr/share/elasticsearch/config/elasticsearch.yml
安装 elasticsearch-head（ES可视化工具）
下载镜像
docker pull mobz/elasticsearch-head:5
运行
docker run -d --name es_admin -p 9100:9100 mobz/elasticsearch-head:5
连接 es
安装 kibana
下载镜像
docker pull kibana:7.17.0
运行
docker run -d --name kibana -p 5601:5601 -e ELASTICSEARCH_HOSTS=http://42.192.20.119:9200 kibana:7.17.0