windows安装elk springcloud(springboot)日志输出到elk

约定不等于承诺〃 2022-11-22 13:00 195阅读 0赞

# 下载相应软件包： #

Elasticsearch 下载：https://www.elastic.co/downloads/elasticsearch

Logstash       下载：https://www.elastic.co/downloads/logstash

kibana           下载：https://www.elastic.co/downloads/kibana

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70][]

Elasticsearch,Logstash,kibana 都是无需安装软件 直接解压安装包即可

最好将 Elasticsearch,Logstash,kibana 解压到同一个目录下(我的目录名为这elk)

## 1.elasticsearch ##

Elasticsearch 的bin 目录下 输入 elasticsearch 回车

如图：

![20201104170528141.png][]

然后 打开浏览器：输入 127.0.0.1:9200

如图：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 1][]

表示正常。但是只能在本地访问，拿ip访问是访问不到

需要在config目录下的修改以下配置

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 2][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 3][]

## 2.kibana ##

然后启动kibana运行，kibana.bat 发现根本启动不起来，这是因为需要在kibana配置文件中设置elasticsearch的地址才能进行启动。

修改配置文件

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 4][]

修改后启动kibana.bat

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 5][]

## 3.logstash ##

在logstash\\bin目录下创建文件logstash.conf并写入

172.16.0.240为我的logstash的ip 端口随便写一个，要与springboot的logback-spring.xml 中的输出的地址一致

input {
    
            tcp {
    
            mode => "server"
    
            host => "172.16.0.240"
    
            port => 4567
    
            codec => json_lines
    
    }
    
    }
    
    output {
    
            elasticsearch {
    
            hosts => "172.16.0.240:9200"
    
            index => "test-%{+YYYY.MM.dd}"
    
    }
    
    }

## 4.springboot配置 ##

<dependency>
    
    <groupId>net.logstash.logback</groupId>
    
    <artifactId>logstash-logback-encoder</artifactId>
    
    <version>6.1</version>
    
    </dependency>

logstash-spring.xml配置,在加入以下代码

<appender name="LOGSTASH_TCP"
    
    class="net.logstash.logback.appender.LogstashTcpSocketAppender">
    
    <destination>172.16.0.240:4567</destination>
    
    
    
    <encoder
    
    class="net.logstash.logback.encoder.LoggingEventCompositeJsonEncoder">
    
    <providers>
    
    <timestamp>
    
    <timeZone>UTC</timeZone>
    
    </timestamp>
    
    <pattern>
    
    <pattern>
    
    {
    
    "severity": "%level",
    
    "service": "${springAppName:-}",
    
    "trace": "%X{X-B3-TraceId:-}",
    
    "span": "%X{X-B3-SpanId:-}",
    
    "exportable": "%X{X-Span-Export:-}",
    
    "pid": "${PID:-}",
    
    "thread": "%thread",
    
    "class": "%logger{40}",
    
    "rest": "%message"
    
    }
    
    </pattern>
    
    </pattern>
    
    </providers>
    
    </encoder>
    
    </appender>
    
    
    
    <root level="info">
    
    <appender-ref ref="LOGSTASH_TCP"/>
    
    </root>

登录kibana创建index后就能看到数据了，在文本框输入我们要的数据 或者不输入

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 6][]

# 心得： #

1.外网访问需要配置elasticsearch里面的地址

2.logstash input需要 codec => json\_lines ，不然数据不出来

3.springboot 应用怎么来看是否能访问到logstash ，如果访问不到控制台会报错

# NSSM可以把bat 文件设置为windows的服务 #

现在将 Elasticsearch，Logstash,kibana 都安装成windows服务。

下载 NSSM 软件。网址：http://www.nssm.cc/download

Elasticsearch服务安装：

在cmd(要当前运行目录在Elasticsearch的bin下) 中直接运行  elasticsearch-service.bat install

安装成功后可以在   服务列表中看到

如图：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 7][]

下面来讲下 用NSSM 安装服务

将cmd 当前所在目录设置到 nssm.exe 的目录下

运行 nssm install

打开如下页面：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 8][]

在 Path 后 单击 ... 按钮 浏览要安装的服务 批处理程序

对应Path：

Elasticsearch：D:\\installsoftware\\elk\\elasticsearch-6.1.2\\bin\\elasticsearch.bat

单击 install service 就可以了。

如果都安装成功 就可以看到 服务列表 会显示这三个服务

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 9][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70]: /images/20221120/4cde7573c5334561bf568336931e8b89.png
[20201104170528141.png]: /images/20221120/6ba87ae43a0546aea6944319366639dd.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20201104170554240.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/2020110417063446.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20201104170717861.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20201104170757157.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/2020110417083331.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20201104170905823.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20201104170925436.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20201104170937680.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5_size_16_color_FFFFFF_t_70 9]: https://img-blog.csdnimg.cn/20201104170959640.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNDQ4MzQ5,size_16,color_FFFFFF,t_70