2023年7月17日发(作者：)

使⽤elk收集应⽤⽇志使⽤elk收集应⽤⽇志使⽤redis作为broker，logstash作为indexer，收集⽇志进⼊es。相关软件版本号redis 3.0.6elasticsearch 5.3.0logstash 5.6.1kibana 5.3.0logstash配置创建⽂件：~/test/logstash/ input{ redis {

batch_count => 1 data_type => "list" key => "logstash-test" host => "127.0.0.1" port => 6379 threads => 5 } } output{ stdout{ codec => json_lines } elasticsearch{ hosts => ["127.0.0.1:9200"] index => "logstash-%{type}-%{+}" document_type => "%{type}" sniffing => true template_overwrite => true } }测试1. 使⽤上述⽂件启动logstash，ying:logstash-5.6.1 ying$ bin/logstash -f ~/test/logstash/2. 使⽤redis-cli发送数据到redis。RPUSH logstash-test '{"name":"","type":"test","say":"hello"}'1. logstash看到输出数据{"name":"","@version":"1","say":"hello","@timestamp":"2017-09-30T06:53:49.110Z","type":"test"}1. kibana中也能看到数据后续，只需要在应⽤中只需要将⽇志写⼊（使⽤RPUSH）到redis的logstash-test中，即可将⽇志收集进es，使⽤kibana分析。