ELK Ultra Quick Start (Windows)

ELK is a combination of three open source software, Elasticsearch, Logstash, and Kibana.
The software is quite easy to use and can be run very easily on Windows. This article records the process of initially running these three softwares on windows, which is suitable for children's shoes who are new to ELK.

1. Environment
Windows7 64bit
JDK1.7.0_72 64bit
logstash 2.3.1 elasticsearch
2.3.1
kibana 4.5.0

2. Download

Download and unzip the following 3 packages (the latest packages at the time of writing)
https://download.elastic.co/ logstash/logstash/logstash-2.3.1.zip
https://download.elastic.co/elasticsearch/release/org/elasticsearch/distribution/zip/elasticsearch/2.3.1/elasticsearch-2.3.1.zip
https:// download.elastic.co/kibana/kibana/kibana-4.5.0-windows.zip

Download the test data ELK_test.7z (see the attachment of this article) and unzip it. We assume that both are extracted to the D:\opensource\ELK directory.
After decompression, the directory is as follows:

D:\opensource\ELK>dir /b
elasticsearch-2.3.1
elasticsearch-2.3.1.zip
first-pipeline.conf
kibana-4.5.0-windows
kibana-4.5.0-windows.zip
logstash-2.3.1
logstash-2.3.1.zip
logstash-tutorial-dataset

3.配置
D:\opensource\ELK\first-pipeline.conf

input {
    file {
        path => "D:/opensource/ELK/logstash-tutorial-dataset"
        start_position => beginning
        ignore_older => 0
    }
}

filter {
    grok {
        match => { "message" => "%{COMBINEDAPACHELOG}"}
    }
}

output {
    file {
        path => "D:/opensource/ELK/logstash-tutorial-output.txt"
    }
    elasticsearch {
    }
}

D: \ opensource \ ELK \ kibana-4.5.0-windows \ config \
kibana.yml

elasticsearch.url: "http://localhost:9200"

4. Start ELK
and open 3 DOS windows at the same time, type:

D:\opensource\ELK\logstash-2.3.1\bin>logstash -f ../../first-pipeline.conf
D:\opensource\ELK\elasticsearch-2.3.1\bin>elasticsearch
D: \ opensource \ ELK \ kibana-4.5.0-windows \ bin> kibana

5. Browse to http://localhost:5601
This is the final product kibana, you can view the logs here.

Manually modify the logstash-tutorial-dataset, add a few lines of data at the end, and then refresh the kibana page (Discover tab) to see real-time data.
So far, the ELK journey is over easily!

6. Typical architecture reference materials
Use ElasticSearch+LogStash+Kibana+Redis to build a log management service

ELK Ultra Quick Start (Windows)

Guess you like