版本兼容查看
https://www.elastic.co/cn/support/matrix#matrix_kubernetes
日志收集优缺点
filebeat(所有机器)->redis(集群)/zookeeper+kafak(集群)->logstash(纵向配置,使用input进行隔离)->es(集群)->kibina(集群)
logstash
优点:
1、可以对数据进行处理(拆分、分析、格式化)
缺点:
1、依赖java环境
2、占用CPU、内存
Filebeat
优点:轻量级
缺点:只能做数据传输,不能处理数据
- 官方文档
es: https://www.elastic.co/guide/en/welcome-to-elastic/current/getting-started-general-purpose.html
filebeat
input: https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html
output: https://www.elastic.co/guide/en/beats/filebeat/current/configuring-output.html
logstash
input: https://www.elastic.co/guide/en/logstash/current/input-plugins.html
output: https://www.elastic.co/guide/en/logstash/current/output-plugins.html
标签:ELK,www,en,co,elastic,current,地址,官方,https
From: https://www.cnblogs.com/tengfei520/p/16749839.html