Shulou(Shulou.com)06/01 Report--

Https://github.com/elastic/beats-dashboards

I. introduction

Filebeat looks like the function pen logstash is better and is the next generation of log collectors.

Topbeat periodically collects system information such as each process information, load, memory, disk, and so on, and then sends the data to elasticsearch for indexing.

Packetbeat can analyze the slow query log of mysql or mongodb in a certain period of time, as well as the throughput of Icano, the frequently executed query statements, http access and other information during this period, and then show the analyzed results in the form of a chart.

Second, the required beats package

Filebeat-1.2.3-x86_64.rpm

Topbeat-1.2.2-x86_64.rpm

Packetbeat-1.2.2-x86_64.rpm

Third, install beats

1. Install filebeat

[root@ossec-server ~] # rpm-ivh filebeat-1.2.3-x86_64.rpm

Warning: filebeat-1.2.3-x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID d88e42b4: NOKEY

Preparing... # [100%]

1:filebeat # # [100%]

[root@ossec-server] # curl-XPUT 'http://localhost:9200/_template/filebeat?pretty'-d@/etc/filebeat/filebeat.template.json

{

"acknowledged": true

}

[root@ossec-server ~] # / etc/init.d/filebeat start

Stopping filebeat: [FAILED]

Starting filebeat: [OK]

2. Install topbeat

[root@ossec-server ~] # rpm-ivh topbeat-1.2.2-x86_64.rpm

Preparing... # [100%]

Package topbeat-1.2.2-1.x86_64 is already installed

[root@ossec-server] # curl-XPUT 'http://localhost:9200/_template/topbeat'-d@/etc/topbeat/topbeat.template.json

{"acknowledged": true}

[root@ossec-server ~] # / etc/init.d/topbeat start

3. Install packetbeat

[root@ossec-server ~] # rpm-ivh packetbeat-1.2.2-x86_64.rpm

Preparing... # [100%]

Package packetbeat-1.2.2-1.x86_64 is already installed

[root@ossec-server] # curl-XPUT 'http://localhost:9200/_template/packetbeat'-d@/etc/packetbeat/packetbeat.template.json

{"acknowledged": true}

[root@ossec-server ~] # / etc/init.d/topbeat start

Starting topbeat: [OK]

4. Install dashboards

[root@ossec-server ~] # git clone https://github.com/elastic/beats-dashboards.git

Initialized empty Git repository in / root/beats-dashboards/.git/

Remote: Counting objects: 1303, done.

Remote: Total 1303 (delta 0), reused 0 (delta 0), pack-reused 1303

Receiving objects: 100% (1303 MiB), 2.75 MiB | 152 KiB/s, done.

Resolving deltas: 100,892 (892), done.

[root@ossec-server ~] # cd beats-dashboards

[root@ossec-server beats-dashboards] # sh load.sh-url http://localhost:9200

Loading dashboards to http://localhost:9200 in .kibana

{"error": "IndexAlreadyExistsException [[.kibana] already exists]", "status": 400} {"acknowledged": true} Loading search Cache-transactions:

{"_ index": ".kibana", "_ type": "search", "_ id": "Cache-transactions", "_ version": 1, "created": true}

Loading search DB-transactions:

{"_ index": ".kibana", "_ type": "search", "_ id": "DB-transactions", "_ version": 1, "created": true}

Loading search Default-Search:

{"_ index": ".kibana", "_ type": "search", "_ id": "Default-Search", "_ version": 1, "created": true}

Loading search Filesystem-stats:

{"_ index": ".kibana", "_ type": "search", "_ id": "Filesystem-stats", "_ version": 1, "created": true}

Loading search HTTP-errors:

{"_ index": ".kibana", "_ type": "search", "_ id": "HTTP-errors", "_ version": 1, "created": true}

Loading search MongoDB-errors:

{"_ index": ".kibana", "_ type": "search", "_ id": "MongoDB-errors", "_ version": 1, "created": true}

Loading search MongoDB-transactions:

{"_ index": ".kibana", "_ type": "search", "_ id": "MongoDB-transactions", "_ version": 1, "created": true}

Loading search MongoDB-transactions-with-write-concern-0:

{"_ index": ".kibana", "_ type": "search", "_ id": "MongoDB-transactions-with-write-concern-0", "_ version": 1, "created": true}

5. Add beats index

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.