1、啟動es-head問題
因為高版本es-head需要單獨啟動，所以先要安裝npm等工具。安裝教程見[1]
啟動命令：../elasticsearch-head/node_modules/grunt/bin/grunt server
2、logstash同步到es中
[ERROR][logstash.outputs.elasticsearch] Failed to install template.{:message=>"Template file '' could not be found!", :class=>"ArgumentError",:backtrace=>["/usr/local/logstash-.3.0/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.1.1-java/lib/logstash/outputs/elasticsearch/template_manager.rb:31:in
`read_template_file'",
此處是因為logstash解析日志沒有輸出結果
3、權限錯誤
ERROR Unable to locate appender “${sys:ls.log.format}_rolling” for logger config “root”
這里是logstash 訪問的配置文件（如：/etc/logstach/conf.d文件下的文件用戶組是root，導致不能運行）、輸入文件的用戶權限等有誤。
將這些目錄下的文件的用戶和用戶組修改成logstash（chowd -R logstash:logstash /var/log/logstash)
4、測試logstash配置文件是否出錯
使用命令 bin/logstash -f /etc/logstash/config/test.conf -t 測試配置文件是否有問題。
如果輸出如下信息：Configuration OK。則說明配置信息無誤
5、配置出錯問題
Could not find log4j2 configuration at path //usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
修改步驟：
mkdir -p /usr/share/logstash/config/
ln -s /etc/logstash/* /usr/share/logstash/config
chown -R logstash:logstash /usr/share/logstash/config/
Reference:
[1] https://www.cnblogs.com/xiaojianfeng/p/9435507.html
[2] https://www.cnblogs.com/jsonhc/p/7562412.html