ELK

도커 elasticsearch

https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#_set_vm_max_map_count_to_at_least_262144
아래가 윈도우 설치
https://tommypagy.tistory.com/343

docker network create elastic
#elasticsearch
docker pull docker.elastic.co/elasticsearch/elasticsearch:7.6.2
docker run -d --network=elastic --name elasticsearch -p 9200:9200 -p 9300:9300 --memory=1000m -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.6.2

#kibana
docker pull docker.elastic.co/kibana/kibana:7.6.2
docker run -d --network=elastic --name kibana -p 5601:5601 --memory=500m docker.elastic.co/kibana/kibana:7.6.2

#logstash 컨테이너 생성
docker pull docker.elastic.co/logstash/logstash:7.6.2
docker run -d --name logstash-gw --network elastic -p 5044:5044 --memory=500m -v /mnt/c/logs/gateway/logstash.conf:/usr/share/logstash/pipeline/logstash.conf -v /mnt/c/logs/gateway:/usr/share/logstash/chatlog docker.elastic.co/logstash/logstash:7.6.2
docker run -d --name logstash-eg --network elastic -p 5045:5045 --memory=500m -v /mnt/c/logs/engine/logstash.conf:/usr/share/logstash/pipeline/logstash.conf -v /mnt/c/logs/engine:/usr/share/logstash/chatlog docker.elastic.co/logstash/logstash:7.6.2

Unassgined shard 해결 관련

https://a3magic3pocket.github.io/posts/elasticsearch-unassigned-shards/

#로컬에서는 클러스트링 하지 않으므로 replica 수를 0으로 해놓는다
curl -XPUT \
      "http://localhost:9200/_settings" \
      -H 'Content-Type: application/json' \
      -d '{
          "index" : {
              "number_of_replicas" : 0
          }
      }'

FireBeat 설명

https://kanoos-stu.tistory.com/20

728x90