启动filebeat
./filebeat -e -c filebeat.yml >/dev/null 2>&1 &
启动elk
docker run -v /etc/logstash/02-beats-input.conf:/etc/logstash/conf.d/ -d -p 5601:5601 -p 9200:9200 -p 5044:5044 -e ES_MIN_MEM=128m -e ES_MAX_MEM=1024m -it --name elk sebp/elk
docker 和容器枝间文件复制
docker cp /etc/pki/tls/certs/logstash.crt 80:/etc/pki/tls/certs/
删除停止的容器
docker rm $(docker ps -a -q)
启动es-head
docker create --name es-head -p 9100:9100 mobz/elasticsearch-head:5
docker start es-head
es-head 无法连接 es
在el.yml 配置文件加
http.cors.enabled: true
http.cors.allow-origin: "*"