本篇文件前提是在centos7.6上使用rpm包安裝的logstash,添加systemd方式啟動。
#默認為rpm包安裝,進行執行目錄
cd /usr/share/logstash/bin/
#系統自帶的system-install就是提供的開機自啟動,查看文檔說明
[root@db01 bin]# ./system-install --help
OPTIONSFILE: Full path to a startup.options file
OPTIONSFILE is required if STARTUPTYPE is specified, but otherwise looks first
in /usr/share/logstash/config/startup.options and then /etc/logstash/startup.options
Last match wins #我們只看這一行,如果是rpm包,會有/etc/logstash/startup.options文件,進行文件,查看選項是否為各目錄存放地址
新建logstash配置文件
#貼上一個簡單的實列,作為systemd啟動的配置文件
cat /etc/logstash/conf.d/kafka.conf #conf.d目錄下只能配置一個.conf文件
input {
kafka{ #從kafka集群中拉取數據
bootstrap_servers => ["10.0.0.200:9092,10.0.0.201:9092,10.0.0.202:9092"]
group_id => "test"
auto_offset_reset => "earliest"
consumer_threads => "5"
decorate_events => "false"
topics => ["kafka"]
type => "nginx_log"
codec => json
}
}
output {
stdout {}
elasticsearch {
hosts => "http://192.168.2.23:9200"
manage_template => false
index => "nginx-%{+yyyy.MM}"
}
}
生成systemd
#生成systemd
/opt/kafka/bin/kafka-server-start.sh -daemon /opt/kafka/config/server.properties
#啟動logstash
systemctl start logstash
systemctl enable logstash
#觀察日志查看是否啟動成功
tail -f /var/log/logstash/logstash-plain.log