ELK（Elasticsearch+Logstash+Kibana）

docker pull elasticsearch:6.4.2
docker run -d --name es -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:6.4.2
#修改配置
docker exec -it es /bin/bash
cd config
vi elasticsearch.yml
    network.bind_host: 0.0.0.0
    http.cors.enabled: true
    http.cors.allow-origin: "*"
exit
#重启看效果
docker restart es 
curl http://192.168.1.189:9200/

docker pull logstash:6.4.2
docker run --name es_logstash -d --privileged=true logstash:6.4.2
#修改配置
docker exec -it es_logstash /bin/bash
cd config
vi logstash.yml
    http.host: "0.0.0.0"
    xpack.monitoring.elasticsearch.url: http://192.168.1.189:9200
    xpack.monitoring.elasticsearch.username: elastic
    xpack.monitoring.elasticsearch.password: changme

cd pipeline
vi logstash.conf

input {
        file {
            codec=> json
                path => "/usr/local/*.json"
        }
}

output {
   elasticsearch{
     hosts=> "http://192.168.1.189:9200"
   }
}

docker pull kibana:6.4.2
docker run --name es_kibana -p 5601:5601 -d -e ELASTICSEARCH_URL=http://192.168.1.189:9200 kibana:6.4.2

vi kibana.yml
elasticsearch.url="http://192.168.1.189:9200"