【centos】安裝ELK之kibana

部署環境：

• centos 6.X
• jdk 1.7
• elasticsearch 2.3.1 https://www.elastic.co/downloads/elasticsearch
• logstash 2.3.1 https://www.elastic.co/downloads/logstash
• Kibana 4.5.0 https://www.elastic.co/downloads/kibana
• 都須要之後臺服務運行時，在更新模板或者其餘配置文件後，須要從新啓動服務；（本身執行時會有多個服務進程，不知操做問題仍是別的，我就逐個kill掉，而後再起新的）

 

下載資源：

　　kibana：https://www.elastic.co/downloads/kibana 好比下載的是tar.gz包；根據本身習慣，能夠下載rpm，或者zip 均可以。

# 解壓
[root@candaotool software]# tar -zxvf kibana-4.5.0-linux-x64.tar.gz
# 移動
[root@candaotool software]# mv kibana-4.5.0-linux-x64 /usr/local/
# 軟連
[root@candaotool local]# ln -s kibana-4.5.0-linux-x64/ kibana

 

Note: Kibana 4.5.x requires Elasticsearch 2.3.x

• Extract your archive
• Open config/kibana.yml in an editor
• Set the elasticsearch.url to point at your Elasticsearch instance
• Run ./bin/kibana (orbin\kibana.bat on Windows)

Point your browser athttp://yourhost.com:5601 .Check out the README.md

編輯config/kibana.yml文件，elasticsearch.url默認是http://localhost:9200，根據實際狀況修改便可。

# The Elasticsearch instance to use for all your queries.
 elasticsearch.url: "http://192.168.87.8:9200"

 編輯後的配置爲：

# The host to bind the server to.
# server.host: "0.0.0.0"
  server.host: "192.168.87.8" # kibana對外暴漏的IP地址，最終訪問地址爲http://192.168.87.8:5601

# If you are running kibana behind a proxy, and want to mount it at a path,
# specify that path here. The basePath can't end in a slash.
# server.basePath: ""

# The maximum payload size in bytes on incoming server requests.
# server.maxPayloadBytes: 1048576

# The Elasticsearch instance to use for all your queries.
# elasticsearch.url: "http://localhost:9200"
  elasticsearch.url: "http://192.168.87.8:9200" # Elasticsearch 服務的IP+port

 而後運行kibana：

[root@candaotool bin]# ./kibana 
  log   [17:46:25.403] [info][status][plugin:kibana] Status changed from uninitialized to green - Ready
  log   [17:46:25.436] [info][status][plugin:elasticsearch] Status changed from uninitialized to yellow - Waiting for Elasticsearch
  log   [17:46:25.450] [info][status][plugin:kbn_vislib_vis_types] Status changed from uninitialized to green - Ready
  log   [17:46:25.459] [info][status][plugin:markdown_vis] Status changed from uninitialized to green - Ready
  log   [17:46:25.465] [info][status][plugin:metric_vis] Status changed from uninitialized to green - Ready
  log   [17:46:25.477] [info][status][plugin:spyModes] Status changed from uninitialized to green - Ready
  log   [17:46:25.482] [info][status][plugin:statusPage] Status changed from uninitialized to green - Ready
  log   [17:46:25.485] [info][status][plugin:elasticsearch] Status changed from yellow to green - Kibana index ready
  log   [17:46:25.487] [info][status][plugin:table_vis] Status changed from uninitialized to green - Ready
  log   [17:46:25.496] [info][listening] Server running at http://192.168.87.8:5601

 若是之後臺服務運行，那麼執行（最後多個&）：

[root@candaotool bin]# ./kibana &
[1] 4373
[root@candaotool bin]# ls  log   [18:05:36.397] [info][status][plugin:kibana] Status changed from uninitialized to green - Ready
  log   [18:05:36.437] [info][status][plugin:elasticsearch] Status changed from uninitialized to yellow - Waiting for Elasticsearch
  log   [18:05:36.460] [info][status][plugin:kbn_vislib_vis_types] Status changed from uninitialized to green - Ready
  log   [18:05:36.470] [info][status][plugin:markdown_vis] Status changed from uninitialized to green - Ready
  log   [18:05:36.479] [info][status][plugin:metric_vis] Status changed from uninitialized to green - Ready
  log   [18:05:36.494] [info][status][plugin:spyModes] Status changed from uninitialized to green - Ready
  log   [18:05:36.499] [info][status][plugin:statusPage] Status changed from uninitialized to green - Ready
  log   [18:05:36.503] [info][status][plugin:elasticsearch] Status changed from yellow to green - Kibana index ready
  log   [18:05:36.505] [info][status][plugin:table_vis] Status changed from uninitialized to green - Ready
  log   [18:05:36.514] [info][listening] Server running at http://192.168.87.8:5601

 tips：若是須要重啓，須要kill 4373 進程(上圖進程號，可是每次數字不一樣，根據實際狀況更改)，而後再運行 ./kibana &

 

 到此，訪問http://192.168.87.8:5601/app/kibana，發現不能訪問，why？

後來想起來了，須要設置一下火牆策略（Logstash默認的對外服務的端口是9292）

# vim /etc/sysconfig/iptables  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9200 -j ACCEPT  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9292 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 5601 -j ACCEPT  
# service iptables restart  

 

而後訪問http://192.168.87.8:5601，就能夠看到kibana的界面了。

 

遺留問題：

　　好比更新了模板，如何重啓kibana服務？（是我說的那種kill方式麼？仍是有什麼restart的 方式）

參考：

http://opsnotes.net/2015/03/03/install_ELK/

http://kibana.logstash.es/content/kibana/v4/setup.html