ELK单机部署-基于centos8

一、安装前环境配置

1、卸载centos8自带jdk1.8
yum -y remove java-1.8.0*
2、安装openjdk11
sudo dnf install java-11-openjdk-devel
3、提示：请使用root用户安装

二、安装Elasticsearch（在线安装）

https://www.elastic.co/guide/en/elasticsearch/reference/7.10/rpm.html#rpm-repo

1、使用rpm命令导入源的 GPG：

sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

2、vim修改vim /etc/yum.repos.d/elasticsearch.repo粘贴下面的内容到文件中：

[elasticsearch-7.x]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

:wq!

3、安装 Elasticsearch 软件包，输入：

sudo dnf install elasticsearch

4、启动服务并验证状态：

sudo systemctl enable elasticsearch.service --now
sudo systemctl start elasticsearch.service
sudo systemctl status elasticsearch.service

● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2021-01-01 06:05:41 PST; 13s ago
     Docs: https://www.elastic.co
 Main PID: 32122 (java)
    Tasks: 68 (limit: 48694)
   Memory: 1.2G
   CGroup: /system.slice/elasticsearch.service
           ├─32122 /usr/share/elasticsearch/jdk/bin/java -Xshare:auto -Des.networkaddress.cache.ttl=60 -
           └─32310 /usr/share/elasticsearch/modules/x-pack-ml/platform/linux-x86_64/bin/controller

Jan 01 06:04:50 dahouzi-elk systemd[1]: Starting Elasticsearch...
Jan 01 06:05:41 dahouzi-elk systemd[1]: Started Elasticsearch.

5、验证 Elasticsearch 是否运行

[root@dahouzi-elk jvm]# curl -X GET "localhost:9200/"
{
  "name" : "dahouzi-elk",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "IyK8r1PQRM2MCk5z00BbLQ",
  "version" : {
    "number" : "7.10.1",
    "build_flavor" : "default",
    "build_type" : "rpm",
    "build_hash" : "1c34507e66d7db1211f66f3513706fdf548736aa",
    "build_date" : "2020-12-05T01:00:33.671820Z",
    "build_snapshot" : false,
    "lucene_version" : "8.7.0",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}

三、安装Logstash（基于RPM包）

1、下载RPM包，点击RPM X86_64

https://www.elastic.co/cn/downloads/logstash

2、文件下载到/usr/elk目录

wget https://artifacts.elastic.co/downloads/logstash/logstash-7.10.1-x86_64.rpm

3、安装Logstash

[root@dahouzi-elk elk]# ll
total 899900
-rw-r--r--. 1 root root 318860379 Dec 31 22:08 elasticsearch-7.10.1-x86_64.rpm
-rw-r--r--. 1 root root 250278931 Dec 31 21:00 kibana-7.10.1-x86_64.rpm
-rw-r--r--. 1 root root 352352275 Dec 31 22:44 logstash-7.10.1-x86_64.rpm
[root@dahouzi-elk elk]# rpm -ivh logstash-7.10.1-x86_64.rpm
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
Updating / installing...
   1:logstash-1:7.10.1-1              ################################# [100%]
Using bundled JDK: /usr/share/logstash/jdk
Using provided startup.options file: /etc/logstash/startup.options
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/pleaserun-0.0.31/lib/pleaserun/platform/base.rb:112: warning: constant ::Fixnum is deprecated
Successfully created system startup script for Logstash

四、安装Kibana（基于RPM包）

1、文件下载到/usr/elk目录

wget https://artifacts.elastic.co/downloads/kibana/kibana-7.10.1-x86_64.rpm

2、安装Kibana

[root@dahouzi-elk elk]# rpm -ivh kibana-7.10.1-x86_64.rpm
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
Updating / installing...
   1:kibana-7.10.1-1                  ################################# [100%]
[/usr/lib/tmpfiles.d/elasticsearch.conf:1] Line references path below legacy directory /var/run/, updating /var/run/elasticsearch → /run/elasticsearch; please update the tmpfiles.d/ drop-in file accordingly.
[/usr/lib/tmpfiles.d/kibana.conf:1] Line references path below legacy directory /var/run/, updating /var/run/kibana → /run/kibana; please update the tmpfiles.d/ drop-in file accordingly.

未完待续

标签：ELK,7.10,单机,root,elasticsearch,elk,64,rpm,centos8
来源： https://blog.csdn.net/lglglgl/article/details/112074556