logstash :负责日志的收集和分析、处理
https://www.elastic.co/cn/downloads/past-releases#logstash
~]# yum -y localinstall logstash-6.8.1.rpm //事先下载
systemctl start/stop/restart logstash
/usr/share/logstash/bin/logstash --path.settings=/etc/logstash （logstash.yml文件位置） -e ‘input { stdin {} } output { stdout { codec => rubydebug} }‘
hel
kibana 日志信息可视化
https://www.elastic.co/cn/downloads/past-releases#kibana
step1：安装
~]# yum -y localinstall kibana-6.8.1-x86_64.rpm
~]# vim /etc/kibana/kibana.yml
server.port: 5601 #监听端口
server.host: "192.168.0.103" #监听地址
elasticsearch.hosts: ["http://192.168.0.103:9200"] #elasticsearch服务器地址
i18n.locale: "zh-CN" #修改为中文
step2:启动并且验证
~]# systemctl start kibana
~]# systemctl enable kibana
~]# ss -ntulp |grep 5601
LISTEN 0 128 192.168.1.31:5601
原文：https://www.cnblogs.com/krystal-LA-zx/p/14294598.html