一、下載並安裝Logstash

官網地址：https://www.elastic.co/cn/downloads/logstash

wget https://artifacts.elastic.co/downloads/logstash/logstash-7.3.1.tar.gz

解壓：

tar zxvf logstash-7.3.1.tar.gz  -C /usr/wubin

編輯配置

vim  /usr/wubin/logstash8.1/config/logstash-sample.conf

配置檔案

 將 hosts => ["http://localhost:9200"]  改為 hosts => ["http://172.16.75.205:9200"]  

配置完成，wq！儲存退出

二、Logstash開機自啟

vim /usr/lib/systemd/system/logstash.service

配置檔案：

[Unit]
Description=logstash
Wants=network-online.target
After=network-online.target

[Service]
User=root
ExecStart=/usr/wubin/logstash8.1/bin/logstash -f /usr/wubin/logstash8.1/config/logstash-sample.conf
# 設定為掉線自動重啟，程序強制殺掉後會自動重新啟動
Restart=always

[Install]
WantedBy=multi-user.target

配置完成，wq！儲存退出

三、驗證

systemctl daemon-reload
systemctl enable logstash
systemctl status logstash
systemctl start logstash
systemctl status logstash