ELK 本地安装

1、下载ES
https://www.elastic.co/cn/dow...
2、启动ES

3、查看http://localhost:9200/
4、下载logstash
https://www.elastic.co/cn/dow...
5、安装logstatsh
5.1配置logstash

input {

      tcp {
        port => "5044"
        codec => json
      }
   }
output {
       elasticsearch {
          hosts => ["localhost:9200"] 
          index => "document"
          }
       stdout { codec => rubydebug }
    }

启动logstash

D:\logstash-7.12.0\bin>logstash.bat -f ../config/logstash.conf

安装logstash插件

D:\logstash-7.12.0\bin>logstash-plugin install 插件名

6、下载kibana
https://www.elastic.co/cn/dow...
安装kibana，配置文件在config目录下

启动kibana

7、logback.xml配置

maven依赖

 <dependency>
            <groupId>net.logstash.logback</groupId>
            <artifactId>logstash-logback-encoder</artifactId>
            <version>4.9</version>
        </dependency>

logback.xml配置

<configuration>
    <springProperty name="LOG_PATH" source="logging.path" defaultValue="/usr/data/applicationName" />
    <appender name="LOGSTASH" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
        <destination>127.0.0.1:5044</destination>
        <!-- <encoder charset="UTF-8" class="net.logstash.logback.encoder.LogstashEncoder" /> -->
        <!-- 日志输出编码 -->
        <encoder class="net.logstash.logback.encoder.LoggingEventCompositeJsonEncoder">
            <providers>
                <timestamp>
                    <timeZone>UTC</timeZone>
                </timestamp>
                <pattern>
                    <pattern>
                        {
                        "severity": "%level",
                        "service": "applicationName",
                        "thread": "%thread",
                        "class": "%logger{40}",
                        "msg": "%message"
                        }
                    </pattern>
                </pattern>
            </providers>
        </encoder>
    </appender>
    <root level="ERROR">
        <appender-ref ref="LOGSTASH" />
    </root>

</configuration>

注意事项，安装目录最好不要有中文字符