7,540
edits
Changes
→Telepítés
[2018-09-12T20:01:26,403][INFO ][logstash.inputs.metrics ] Monitoring License OK
[2018-09-12T20:01:27,999][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
</pre>
===Testing logstash===
<pre>
docker service create \
--name logger-test \
--network elk \
--restart-condition none \
debian \
logger -n logstash -P 51415 hello world
</pre>
<pre>
# docker service ps logstash
ID NAME IMAGE NODE
nvg3qy02bq2v logstash.1 docker.elastic.co/logstash/logstash:6.4.0 worker0
</pre>
<pre>
# eval $(docker-machine env worker0)
</pre>
<pre>
# docker ps
CONTAINER ID IMAGE COMMAND
f4a04bfdc1cf docker.elastic.co/logstash/logstash:6.4.0 "/usr/local/bin/do..."
...
</pre>
<pre>
# docker logs f4a04bfdc1cf
....
{
"severity" => 0,
"@version" => "1",
"tags" => [
[0] "_grokparsefailure_sysloginput"
],
"severity_label" => "Emergency",
"@timestamp" => 2018-09-12T20:24:29.085Z,
"priority" => 0,
"facility_label" => "kernel",
"message" => "<13>1 2018-09-12T20:24:29.013823+00:00 a4f8651665ee root - - [timeQuality tzKnown=\"1\" isSynced=\"0\"] hello world",
"host" => "10.0.0.2",
"facility" => 0
}
</pre>
<pre>
# eval $(docker-machine env mg0)
# docker service rm logger-test
</pre>
