• 安装环境准备

logstash 运行在jvm 上，需要jdk8-jdk11的版本，可以选择官方版本也可以选择openjdk

• 安装 logstash

• yum安装logstash

# 信任源公钥
rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

# 添加yum源

cat >  /etc/yum.repos.d/elasticsearch.repo  <<EOF
[elasticsearch-7.x]
name=Elasticsearch repository for 7.x packages
baseurl=https://mirrors.tuna.tsinghua.edu.cn/elasticstack/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
EOF

# 生成源缓存
 sudo yum makecache fast

# 安装 elasticsearch
sudo yum update && sudo yum install logstash

• 设置 kibana开机自动启动

• systemd 模式下设置

# 开机自动启动
sudo systemctl daemon-reload
sudo systemctl enable logstash
# 启动
sudo systemctl start logstash
# 停止
sudo systemctl stop logstash