A, elk description

Elasticsearch is an open source distributed search engine, its features are: distributed, zero configuration, automatic found that automatic fragmentation index, index mechanism, a copy of the restful interface style, data source, automatically search load, etc.,
Logstash is a completely open source tools, he can to collect your log, filtering, and stores it for later use (e.g., search),
Kibana is an open source and free tool, it can provide Logstash and ElasticSearch Kibana Web log analysis friendly interface, can help you to collect, analyze and search important data logs,
Second, the installation of the elk

We adopt the docker mirror installation,

# download mirror
Docker pull sebp/elk
# boot image, the memory of the specified es
Docker run - e ES_JAVA_OPTS="- Xms256m - Xmx256m" - p, 5601:5601 - p, 5044:5044-9200: p - 9200 - p - 9300-9300 it name elk 2 fbf0a30426d
Need to modify the logstash configuration, a new command window, for the following docker command

# enter the container through the exec command
Docker exec - it elk/bin/bash
After entering the container, modify/etc/logstash/conf. D/02 - beats - input. Conf

Input {
TCP {
Port=& gt; 5044
The codec=& gt; Json_lines

}

}
The output {
Elasticsearch {
Hosts=& gt; [localhost: 9200 ""]

}

}
Save, we use control + P + Q withdrew from the container, and then restart the container, and let our configuration to take effect,