1.制作logstash镜像
FROM logstash:5.6
COPY logstash.conf /some/config-dir/
CMD ["-f","/some/config-dir/logstash.conf"]
logstash.conf
input {
tcp {
port => 4567
}
}
filter {
}
output {
elasticsearch {
hosts => ["elasticsearch:9200"]
index => "logstash-%{type}-%{+YYYY.MM.dd}"
document_type => "%{type}"
}
}
2.编写docker-compose
version: '2'
services:
elasticsearch:
image: elasticsearch:5.6
container_name: elasticsearch
restart: always
networks:
- elk
ports:
- "9200:9200"
- "9300:9300"
volumes:
- /data:/usr/share/elasticsearch/data
logstash:
image: logstash-5.6
container_name: logstash
restart: always
networks:
- elk
ports:
- "4567:4567"
depends_on:
- elasticsearch
kibana:
image: kibana:5.6
container_name: kibana
restart: always
networks:
- elk
ports:
- "5601:5601"
depends_on:
- elasticsearch
networks:
elk:
driver: bridge