docker安装集成elk6.6版本

 

 

docker pull sebp/elk:660

docker images

docker run -p 5601:5601 -p 9200:9200 -p 5044:5044 -itd -e ES_HAEP_SIZE="2g" -e LS_HEAP_SIZE="1g" --name elk sebp/elk:660

 wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-6.6.0-x86_64.rpm

rpm -ivh filebeat-6.6.0-x86_64.rpm

cp /etc/filebeat/filebeat.yml{,.bak}

cat /etc/filebeat/filebeat.yml.bak |grep -Ev "#|^$" >/etc/filebeat/filebeat.yml

vim /etc/filebeat/filebeat.yml 

filebeat modules enable elasticsearch

filebeat setup

service filebeat start