docker搭建ELK环境

# 拉取镜像
docker pull docker.elastic.co/elasticsearch/elasticsearch:6.3.2
# 安装镜像 开放端口 9200，并且把容器名命名为elasticsearch
docker run -d --name elasticsearch -p 9200:9200 docker.elastic.co/elasticsearch/elasticsearch:6.3.2
# 运行容器后，进入容器
docker exec -it elasticsearch /bin/bash
cd config
# 修改配置文件
vi elasticsearch.yml
#==========================================重点在这==================================
# 加入跨域配置
http.cors.enabled: true
http.cors.allow-origin: "*"
# 修改完后，退出容器，并重启
docker restart elasticsearch

# 拉取镜像并运行容器
docker run --name -p 4560:4560 es_logstash docker.elastic.co/logstash/logstash:6.2.4
# 进入容器
docker exec -it es_logstash /bin/bash
# 修改配置信息
cd config
vi logstash.yml
#==========================================重点在这==================================
# xpack.monitoring.elasticsearch.url为本机机器的IP地址
http.host: "0.0.0.0"
xpack.monitoring.elasticsearch.url: http://192.168.2.153:9200
xpack.monitoring.elasticsearch.username: elastic
xpack.monitoring.elasticsearch.password: changme
#==========================================重点在这==================================
# 修改pipeline文件夹下的logstash.conf文件
cd pipeline
vi logstash.conf

input {
  tcp {
    mode => "server"
    host => "0.0.0.0"
    port => 4560
    codec => json_lines
  }
}
output {
  elasticsearch {
    hosts => "192.168.2.153:9200"
    index => "springboot-logstash-%{+YYYY.MM.dd}"
  }
}
#==========================================重点在这==================================
# 进入bin目录
cd /bin/
# 安装插件
logstash-plugin install logstash-codec-json_lines

# 拉取镜像并运行容器
docker pull kibana:6.3.2
docker run --name es_kibana -p 5601:5601 -d -e ELASTICSEARCH_URL=http://192.168.2.153:9200 kibana:6.3.2