部署

安装

采用rpm包的安装方式，直接去官网下载Kibana的rpm安装包并上传至服务器上

  1. yum install -y kibana-7.13.4-x86_64.rpm
  2. systemctl enable kibana

配置

  1. [root@elastic-01 ~]# cat /etc/kibana/kibana.yml 
  2. # Kibana is served by a back end server. This setting specifies the port to use.
  3. server.port: 5601
  5. # Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
  6. # The default is 'localhost', which usually means remote machines will not be able to connect.
  7. # To allow connections from remote users, set this parameter to a non-loopback address.
  8. server.host: 0.0.0.0
  10. # Enables you to specify a path to mount Kibana at if you are running behind a proxy.
  11. # Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
  12. # from requests it receives, and to prevent a deprecation warning at startup.
  13. # This setting cannot end in a slash.
  14. #server.basePath: ""
  16. # Specifies whether Kibana should rewrite requests that are prefixed with
  17. # `server.basePath` or require that they are rewritten by your reverse proxy.
  18. # This setting was effectively always `false` before Kibana 6.3 and will
  19. # default to `true` starting in Kibana 7.0.
  20. #server.rewriteBasePath: false
  22. # Specifies the public URL at which Kibana is available for end users. If
  23. # `server.basePath` is configured this URL should end with the same basePath.
  24. #server.publicBaseUrl: ""
  26. # The maximum payload size in bytes for incoming server requests.
  27. #server.maxPayload: 1048576
  29. # The Kibana server's name.  This is used for display purposes.
  30. #server.name: "your-hostname"
  32. # The URLs of the Elasticsearch instances to use for all your queries.
  33. elasticsearch.hosts: ["http://10.0.0.51:9200"]
  35. # Kibana uses an index in Elasticsearch to store saved searches, visualizations and
  36. # dashboards. Kibana creates a new index if the index doesn't already exist.
  37. #kibana.index: ".kibana"
  39. # The default application to load.
  40. #kibana.defaultAppId: "home"
  42. # If your Elasticsearch is protected with basic authentication, these settings provide
  43. # the username and password that the Kibana server uses to perform maintenance on the Kibana
  44. # index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
  45. # is proxied through the Kibana server.
  46. #elasticsearch.username: "kibana_system"
  47. #elasticsearch.password: "pass"
  49. # Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
  50. # These settings enable SSL for outgoing requests from the Kibana server to the browser.
  51. #server.ssl.enabled: false
  52. #server.ssl.certificate: /path/to/your/server.crt
  53. #server.ssl.key: /path/to/your/server.key
  55. # Optional settings that provide the paths to the PEM-format SSL certificate and key files.
  56. # These files are used to verify the identity of Kibana to Elasticsearch and are required when
  57. # xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
  58. #elasticsearch.ssl.certificate: /path/to/your/client.crt
  59. #elasticsearch.ssl.key: /path/to/your/client.key
  61. # Optional setting that enables you to specify a path to the PEM file for the certificate
  62. # authority for your Elasticsearch instance.
  63. #elasticsearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ]
  65. # To disregard the validity of SSL certificates, change this setting's value to 'none'.
  66. #elasticsearch.ssl.verificationMode: full
  68. # Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
  69. # the elasticsearch.requestTimeout setting.
  70. #elasticsearch.pingTimeout: 1500
  72. # Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
  73. # must be a positive integer.
  74. #elasticsearch.requestTimeout: 30000
  76. # List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
  77. # headers, set this value to [] (an empty list).
  78. #elasticsearch.requestHeadersWhitelist: [ authorization ]
  80. # Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
  81. # by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
  82. #elasticsearch.customHeaders: {}
  84. # Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
  85. #elasticsearch.shardTimeout: 30000
  87. # Logs queries sent to Elasticsearch. Requires logging.verbose set to true.
  88. #elasticsearch.logQueries: false
  90. # Specifies the path where Kibana creates the process ID file.
  91. #pid.file: /run/kibana/kibana.pid
  93. # Enables you to specify a file where Kibana stores log output.
  94. #logging.dest: stdout
  95. logging.dest: /var/log/kibana/kibana.log
  97. # Set the value of this setting to true to suppress all logging output.
  98. #logging.silent: false
  100. # Set the value of this setting to true to suppress all logging output other than error messages.
  101. #logging.quiet: false
  103. # Set the value of this setting to true to log all events, including system usage information
  104. # and all requests.
  105. #logging.verbose: false
  107. # Set the interval in milliseconds to sample system and process performance
  108. # metrics. Minimum is 100ms. Defaults to 5000.
  109. #ops.interval: 5000
  111. # Specifies locale to be used for all localizable strings, dates and number formats.
  112. # Supported languages are the following: English - en , by default , Chinese - zh-CN .
  113. i18n.locale: "zh-CN"

启动

  1. systemctl start kibana

界面配置

登录

浏览器登录kibana界面，http://10.0.0.51:5601
image.png

添加索引

1、找到Stack Management
image.png
2、选择”索引模式”
image.png
3、选择”创建索引模式”
image.png
4、索引名称栏输入索引名字,并点击下一步，
image.png
5、选择@timastamp进行时间筛选，创建索引模式
image.png
6、选择”Discover”
image.png
7、选择索引条目，就可以查看这条索引对应的日志信息了
image.png
image.png