【善用工具】ELK

怼烎@ 2022-06-08 06:17 191阅读 0赞

ELK是开源项目，由三部分组成的——logstash，elasticsearch和kibana。  
Logstash：负责对日志进行收集，分析过滤等作用，一般部署在线上机器上。  
Logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching)  
Elasticsearch：简单说是一个基于lucene的检索(+存储)服务；在elk中主要负责搜索日志功能。  
Kibana：是为Elasticsearch服务的，提供一个可视化的web界面，进行数据的查询，汇总。

比较好的介绍：  
[http://www.bogotobogo.com/Hadoop/ELK/ELK\_ElasticSearch\_Logstash.php][http_www.bogotobogo.com_Hadoop_ELK_ELK_ElasticSearch_Logstash.php]  
[http://feelmanc.blog.51cto.com/5429938/1250430][http_feelmanc.blog.51cto.com_5429938_1250430]  
解决8小时时差问题：  
[http://vinc.top/2016/09/22/%E8%A7%A3%E5%86%B3elk%E6%97%B6%E5%8C%BA%E9%97%AE%E9%A2%98%E5%AF%BC%E8%87%B4%E7%9A%84%E7%9B%B8%E5%B7%AE8%E5%B0%8F%E6%97%B6/][http_vinc.top_2016_09_22_E8_A7_A3_E5_86_B3elk_E6_97_B6_E5_8C_BA_E9_97_AE_E9_A2_98_E5_AF_BC_E8_87_B4_E7_9A_84_E7_9B_B8_E5_B7_AE8_E5_B0_8F_E6_97_B6]

elasticsearch\_dsl-py相关：  
[https://github.com/elastic/elasticsearch-dsl-py][https_github.com_elastic_elasticsearch-dsl-py]  
[http://www.cnblogs.com/xing901022/p/4960470.html][http_www.cnblogs.com_xing901022_p_4960470.html]  
[https://stackoverflow.com/questions/29904261/range-aggregation-using-elasticsearch-dsl-py][https_stackoverflow.com_questions_29904261_range-aggregation-using-elasticsearch-dsl-py]  
[http://blog.csdn.net/yuchenwuhen/article/details/51103543][http_blog.csdn.net_yuchenwuhen_article_details_51103543]  
[https://stackoverflow.com/questions/39263663/elasticsearch-dsl-py-query-formation][https_stackoverflow.com_questions_39263663_elasticsearch-dsl-py-query-formation]

[https://www.elastic.co/guide/en/elasticsearch/reference/2.3/search-aggregations-bucket-daterange-aggregation.html][https_www.elastic.co_guide_en_elasticsearch_reference_2.3_search-aggregations-bucket-daterange-aggregation.html]

[http://fingerchou.com/categories/elasticsearch/][http_fingerchou.com_categories_elasticsearch]

[http_www.bogotobogo.com_Hadoop_ELK_ELK_ElasticSearch_Logstash.php]: http://www.bogotobogo.com/Hadoop/ELK/ELK_ElasticSearch_Logstash.php
[http_feelmanc.blog.51cto.com_5429938_1250430]: http://feelmanc.blog.51cto.com/5429938/1250430
[http_vinc.top_2016_09_22_E8_A7_A3_E5_86_B3elk_E6_97_B6_E5_8C_BA_E9_97_AE_E9_A2_98_E5_AF_BC_E8_87_B4_E7_9A_84_E7_9B_B8_E5_B7_AE8_E5_B0_8F_E6_97_B6]: http://vinc.top/2016/09/22/%E8%A7%A3%E5%86%B3elk%E6%97%B6%E5%8C%BA%E9%97%AE%E9%A2%98%E5%AF%BC%E8%87%B4%E7%9A%84%E7%9B%B8%E5%B7%AE8%E5%B0%8F%E6%97%B6/
[https_github.com_elastic_elasticsearch-dsl-py]: https://github.com/elastic/elasticsearch-dsl-py
[http_www.cnblogs.com_xing901022_p_4960470.html]: http://www.cnblogs.com/xing901022/p/4960470.html
[https_stackoverflow.com_questions_29904261_range-aggregation-using-elasticsearch-dsl-py]: https://stackoverflow.com/questions/29904261/range-aggregation-using-elasticsearch-dsl-py
[http_blog.csdn.net_yuchenwuhen_article_details_51103543]: http://blog.csdn.net/yuchenwuhen/article/details/51103543
[https_stackoverflow.com_questions_39263663_elasticsearch-dsl-py-query-formation]: https://stackoverflow.com/questions/39263663/elasticsearch-dsl-py-query-formation
[https_www.elastic.co_guide_en_elasticsearch_reference_2.3_search-aggregations-bucket-daterange-aggregation.html]: https://www.elastic.co/guide/en/elasticsearch/reference/2.3/search-aggregations-bucket-daterange-aggregation.html
[http_fingerchou.com_categories_elasticsearch]: http://fingerchou.com/categories/elasticsearch/