EFK on Kubernetes

原创

于 2025-02-09 14:29:13 发布 · 777 阅读

12 ·

CC 4.0 BY-SA版权

文章标签：

#kubernetes #jenkins #容器

elastic公司产品链。，文档类数据库，使用Java语言，收集端logstash后来用go语言改写了（使用filebeat），查询方便（配合展示界面可以不用语句就可以查询，并且查询速度快），原理：按照类似索引的机制查询，数据全部归于索引之下

ELK：logstash

EFK：采集：filebeat，fluentd

存储：elasticsearch

展示：kibana

logstash现在少用于收集，多用于过滤。

安装 ElasticSearch

# Add the Elastic Helm charts repo
helm repo add elastic https://helm.elastic.co
helm repo update
# 查询版本 我们使用 7.17.3
[root@master-01 ~]# helm search repo  elastic/elasticsearch  -l
NAME                         CHART VERSION        APP VERSION        DESCRIPTION                                  
elastic/elasticsearch        8.5.1                8.5.1              Official Elastic helm chart for Elasticsearch
elastic/elasticsearch        7.17.3               7.17.3             Official Elastic helm chart for Elasticsearch
elastic/elasticsearch        7.17.1               7.17.1             Official Elastic helm chart for Elasticsearch
elastic/elasticsearch        7.16.3               7.16.3             Official Elastic helm chart for Elasticsearch
elastic/elasticsearch        7.16.2               7.16.2             Official Elastic helm chart for Elasticsearch

[root@master-01 ~]#  helm pull elastic/elasticsearch --version=7.17.3

修改 values

安装

[root@master-01 20-log]#helm upgrade --install els -n logging -f elasticsearch/els-values.yaml  ./elasticsearch --create-namespace --namespace logging 
NAME: els
LAST DEPLOYED: Sat Nov 18 20:17:57 2023
NAMESPACE: logging
STATUS: deployed
REVISION: 1
NOTES:
1. Watch all cluster members come up.
  $ kubectl get pods --namespace=logging -l app=elasticsearch-master -w2. Test cluster health using Helm test.
  $ helm