ELK 安裝教學|Beat 線上及離線安裝

瀏覽人次: 4357
2021-08-10 更新
Beats Logo

尋找需要的 Beats

https://www.elastic.co/beats/

Beats 安裝來源設定

如果有網路環境,可以將 repo 來源新增至 yum 中,所以:

cat > /etc/yum.repos.d/elastic.repo << EOF 
[elasticsearch-7.x]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
EOF

離線環境中,先將下載成 rpm 檔,並 scp 至欲安裝的 Server,所以:

Metricbeat:

curl -L -O https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-7.12.0-x86_64.rpm

Filebeat:

curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.12.0-x86_64.rpm

Packetbeat:

curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.12.0-x86_64.rpm

Beat 安裝

具有網路環境可直接安裝,所以:

Metricbeat:

sudo yum install metricbeat

Filebeat:

sudo yum install filebeat

Packetbeat:

sudo yum install packetbeat

無網路環境,則透過 rpm 安裝,所以:

Metricbeat

rpm -ivh metricbeat-7.12.0-x86_64.rpm

Filebeat

rpm -ivh filebeat-7.12.0-x86_64.rpm

Packetbeat:

rpm -vi packetbeat-7.12.0-x86_64.rpm

啟動 Beat

Metricbeat

systemctl start metricbeat

Filebeat

systemctl start filebeat

Packetbeat

systemctl start packetbeat

開機 Beat 自動啟動

Metricbeat

systemctl enable metricbeat

Filebeat

systemctl enable filebeat

Packetbeat

systemctl enable packetbeat

繼續安裝 LogstashElasticsearchKibana

整合 Kafka 解決高流量系統負載



有任何問題,或是想看新主題?

聯絡我們

快速跳轉目錄

✦ 集先鋒 Bimap – 企業建置高速穩定的海量日誌分析平台✦

集中不同的結構化資料和非結構化日誌,並進行關聯性的大數據整合,客製化儀表版、自訂事件告警、機器學習等等,以滿足各種大數據的應用場景和解決方案。