Install ELK in Ubuntu 14 [转载]，elkubuntu

Install ELK in Ubuntu 14 [转载]，elkubuntu

原文地址http://www.linuxidc.com/Linux/2016-06/132616.htm

Install java 8

Elasticsearch and Logstash rely on java, make sure you have installed java environment(at least java 7, here use java 8). Open JDK or Oracle Java both OK. Follow shows how to install Oracle Java8.

• add Oracle JavaPPA into apt

$  sudo add-apt-repository -y ppa:webupd8team/java

• Update apt package

$ sudo apt-get update

• Install Oracle Java8

$ sudo apt-get -y install oracle-java8-installer

Install Elasticsearch

Here use apt install Elasticsearch. First of all, add Elastic package source.

• import Elasticsearch public GPG key into apt:

$ wget -qO - https://packages.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -

• create Elasticsearch source list

$ echo "deb http://packages.elastic.co/elasticsearch/2.x/debian stable main" | sudo tee -a /etc/apt/sources.list.d/elasticsearch-2.x.list

• update apt package

$ sudo   apt-get update

• install Elasticsearch

$ sudo apt-get -y  install elasticsearch

Now Elasticsearch has been installed, the config file is “/etc/elasticsearch/elasticsearch.yml”, open elasticsearch using command:

$ sudo service elasticsearch start

In order to start es as system boot, using command:

$ sudo update-rc.d elasticsearch defaults 95 10

Install Kibana

Just like install Elasticsearch, also install kibana using source list.

$ echo "deb http://packages.elastic.co/kibana/4.4/debian stable main" | sudo tee -a /etc/apt/sources.list.d/kibana-4.4.x.list

$ sudo apt-get update

$ sudo apt-get -y install kibana

As now, kibana has been installed. We can run kibana service through execute script “/opt/kibana/bin/kibana”, and in browse request “localhost:5601”, we can see the kibana index page. Here use nginx to reverse proxy kibana.
Before install nginx, make some changes in kibana.
First, alter kibana configure file, find the server.host configure line, and change it into server.host: “localhost”. Now kibana can only accessed by localhost, and we will use nginx for outside access.
Secondly, open kibana service.、

$ sudo update-rc.d kibana defaults 96 9; sudo service kibana start

**Here, i meet a question, the kibana service cannot be started, then i modified the file “/lib/systemd/system/kibana.service”, set User=root, then kibana can be started successfully. The final content of kibana.service as follows:

[Unit]
Description=no description given

[Service]
Type=simple
User=root
Group=root
ExecStart=/opt/kibana/bin/kibana
Restart=always


[Install]
WantedBy=multi-user.target

Install Nginx

$ sudo apt-get install nginx apache2-utils

$ sudo htpasswd -c /etc/nginx/htpasswd.users kibanaaddmin

$ sudo vim /etc/nginx/sites-available/default

and use follow contents to replace it:

server {
        listen 80;
        auth_basic "Restricted Access";
        auth_basic_user_file /etc/nginx/htpasswd.users;
        location / {
                proxy_pass http://localhost:5601;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection 'upgrade';
                proxy_set_header Host $host;
                proxy_cache_bypass $http_upgrade;
        }
}

Now, restart nginx and enable the change.

$ sudo service nginx restart

Install logstash

Operations just like install elasticsearch, add the logstash source into source list.

$ echo 'deb http://packages.elastic.co/logstash/2.2/debian stable main' | sudo tee /etc/apt/sources.list.d/logstash-2.2.x.list

Update the apt package and install logstash.

$ sudo apt-get update
$ sudo apt-get install logstash

最近实习的任务涉及到ELK，为了避免忘记，做了一些笔记，因为公司桌面办公环境是英文，索性用英文记录了。
[转载]原文出处：在 Ubuntu14.04上安装 Elasticsearch, Logstash, Kibana (ELK Stack)