第一步 環境準備---工作目錄準備

1）C:\Users\xu\Desktop\elkcompose\compose\elk_stack

2）C:\Users\xu\Desktop\elkcompose\elasticsearch\config

3）C:\Users\xu\Desktop\elkcompose\elasticsearch\data

4）C:\Users\xu\Desktop\elkcompose\logstash\agent

5）C:\Users\xu\Desktop\elkcompose\logstash\central

6）C:\Users\xu\Desktop\elkcompose\logstash\data

第二部 先關配置檔案內容

1）docker-compose.yml（放在C:\Users\xu\Desktop\elkcompose\compose\elk_stack），配置內容如下：

version: '2'
services:
    elasticsearch-central:
        image: elasticsearch:2
        container_name: elasticsearch-central
        volumes:
           - /c/Users/xu/Desktop/elkcompose/elasticsearch/data/:/usr/share/elasticsearch/data
           - /c/Users/xu/Desktop/elkcompose/elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
        environment:
           - ES_CLUSTERNAME=elasticsearch
        command: elasticsearch
        ports:
           - "9200:9200"
           - "9300:9300"

    kibana-frontend:
        image: kibana:latest
        container_name: kibana-frontend
        ports:
           - "5601:5601"
        links:
           - elasticsearch-central:elasticsearch

    redis-cache:
        image: redis:latest
        container_name: redis-cache
        ports:
           - "6379:6379"

    logstash-central:
        image: logstash:latest
        container_name: logstash-central
        ports:
           - "25826:25826"
           - "25826:25826/udp"
        volumes:
           - /c/Users/xu/Desktop/elkcompose/logstash/central:/conf
           - /c/Users/xu/Desktop/elkcompose/logstash/data/:/data
        command: logstash -f /conf/central.conf
        links:
           - redis-cache:redis
           - elasticsearch-central:db

    logstash-agent:
        image: logstash:latest
        container_name: logstash-agent
        ports:
           - "25827:25827"
           - "25827:25827/udp"
        volumes:
           - /c/Users/xu/Desktop/elkcompose/logstash/agent:/conf
        command: logstash -f /conf/agent.conf
        links:
           - redis-cache:redis
 

cluster.name: ${ES_CLUSTERNAME}

node.name: ${HOSTNAME}

network.host: 0.0.0.0

discovery.zen.ping.multicast.enabled: true

input
{
  tcp
   {
    port => 25827
    type => syslog
   }
  udp
   {
    port => 25827
    type => syslog
   }
}

output
{
  stdout { codec => rubydebug }
  redis
        {
          host => "redis-cache"
          data_type => "list"
          key => "logstash"
        }
}
 

input
{
     file {
            path => "/data/test.txt"
     }
}

output
{

  stdout { }
  elasticsearch
         {
               # we must specify cluster name as we do not use default elasticsearch one
               hosts => "elasticsearch-central:9200"
               # Here not using host as we use cluster | host => db
         }
}

注意：要在C:\Users\xu\Desktop\elkcompose\logstash\data目錄下的test.txt中新增測試資料，測試資料如下

2,xu,30,beijing,hebei

步驟四  啟動容器，相關命令是

1）eval $(docker-machine env test) 

2) docker-compose  up

步驟五  檢視測試結果