日誌分析平台ELK之前端展示kibana
之前的博客一直在聊ELK集群中的存儲、日誌收集相關的組件的配置,但通常我們給用戶使用不應該是一個黑黑的shell界面,通過接口去查詢搜索;今天我們來聊ELK中的前端可視化組件kibana;kibana主要作用是用來展示、搜索、查看、分析、整合elasticsearch中存儲的日誌的一個web用戶界面;使得讓用戶使用ELK更加直觀;
kibana rpm包下載
[root@node06 ~]#wget //artifacts.elastic.co/downloads/kibana/kibana-6.8.12-x86_64.rpm --2020-10-05 19:19:33-- //artifacts.elastic.co/downloads/kibana/kibana-6.8.12-x86_64.rpm Resolving artifacts.elastic.co (artifacts.elastic.co)... 151.101.230.222, 2a04:4e42:36::734 Connecting to artifacts.elastic.co (artifacts.elastic.co)|151.101.230.222|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 193354778 (184M) [application/octet-stream] Saving to: 『kibana-6.8.12-x86_64.rpm』 100%[==========================================================================>] 193,354,778 170MB/s in 1.1s 2020-10-05 19:19:35 (170 MB/s) - 『kibana-6.8.12-x86_64.rpm』 saved [193354778/193354778]
kibana安裝
[root@node06 ~]# ll total 188824 -rw-r--r-- 1 root root 193354778 Aug 18 19:40 kibana-6.8.12-x86_64.rpm [root@node06 ~]# yum install ./kibana-6.8.12-x86_64.rpm Loaded plugins: fastestmirror Examining ./kibana-6.8.12-x86_64.rpm: kibana-6.8.12-1.x86_64 Marking ./kibana-6.8.12-x86_64.rpm to be installed Resolving Dependencies --> Running transaction check ---> Package kibana.x86_64 0:6.8.12-1 will be installed --> Finished Dependency Resolution Dependencies Resolved ========================================================================================================================== Package Arch Version Repository Size ========================================================================================================================== Installing: kibana x86_64 6.8.12-1 /kibana-6.8.12-x86_64 427 M Transaction Summary ========================================================================================================================== Install 1 Package Total size: 427 M Installed size: 427 M Is this ok [y/d/N]: y Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : kibana-6.8.12-1.x86_64 1/1 Verifying : kibana-6.8.12-1.x86_64 1/1 Installed: kibana.x86_64 0:6.8.12-1 Complete! [root@node06 ~]#
配置kibana連接es
提示:server.port用於指定kibana監聽的端口,server.host用於指定kibana監聽的地址,0.0.0.0表示監聽本機所有可用地址;server.name是指定本機的主機名,elasticsearch.hosts用於指定es集群主機地址;配置好以上四項就可以直接啟動kibana了;
啟動kibana
用瀏覽器訪問node06上的5601提供的web服務
好了,到此kibana就部署好了
添加index到kibana
提示:這裡之所以看不到數據,是因為生成日誌的時間不再15分鐘內;
模擬訪問httpd,然後看看kibana是否能夠看到日誌?
提示:可以看到node01訪問node03的httpd的日誌;
搜索響應碼為404的日誌
基於IP地址畫區域地圖
畫條形圖
畫餅圖
折線圖
添加面板