Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Elasticsearch + fluentd for Log analysis

seapy
April 29, 2014

Elasticsearch + fluentd for Log analysis

Elasticsearch, fluentd(not logstash), kibana for Log analysis

how to install, how to congifure

seapy

April 29, 2014
Tweet

More Decks by seapy

Other Decks in Programming

Transcript

  1. GMVFOUEࢸ஖ ↟ࢸ஖द੘੹ഛੋࢎ೦ ↟IUUQEPDTGMVFOUEPSHBSUJDMFTCFGPSFJOTUBMM ↟tVMJNJUOuਸழݔ٘ীࢲप೯ೠѾҗоੋ҃਋੉чਸטܾ೙ਃо੓णפ׮ ↟OUQࢸ੿ਵ۽दрਸزӝച ! ↟ߓನಁః૑ܳ੉ਊೠࢸ஖ ↟IUUQEPDTGMVFOUEPSHBSUJDMFTJOTUBMMCZEFC ↟HFNࢸ஖חCTPO੄ઓࢿਵ۽पಁೞח҃਋ب੓Ҋ૒੽प೯झ௼݀౟ܳ੘ࢿ೧ঠ೧ࢲߓನ౸ࢸ஖ ↟ࢸ஖

    ↟XHFUIUUQQBDLBHFTUSFBTVSFEBUBDPNEFCJBO31.(1(,&:UEBHFOU ↟TVEPBQULFZBEE31.(1(,&:UEBHFOU ↟DVSM-IUUQUPPMCFMUUSFBTVSFEBUBDPNTIJOTUBMMVCVOUVQSFDJTFTI]TI ↟प೯झ௼݀౟ ↟FUDJOJUEUEBHFOU\TUBSU]TUPQ]TUBUVTj^ ! ↟प೯ഛੋ ↟DVSM91045EKTPO\KTPONFTTBHF^IUUQMPDBMIPTUEFCVHUFTU ↟WBSMPHUEBHFOUUEBHFOUMPH౵ੌ੄׮਺ղਊഛੋ ↟ EFCVHUFTU\KTPONFTTBHF^
  2. ↟GMVFOUEࢸ੿ ! ↟ TVEPVTSMJCGMVFOUSVCZCJOGMVFOUHFNJOTUBMMGMVFOUQMVHJOFYUSBDU@RVFSZ@QBSBNT ↟ VSMQBUIীࢲ౵ۄ޷ఠܳ୶୹റ߹ѐ੄߸ࣻ۽ܻ࠙ ! ↟ TVEPVTSMJCGMVFOUSVCZCJOGMVFOUHFNJOTUBMMGMVFOUQMVHJOUZQFDBTU ↟۽Ӓ౵यѾҗחޙ੗ৌੋؘ੉઺ੌࠗܳ׮ܲఋੑਵ۽߸ജ

    ! ↟ TVEPVTSMJCGMVFOUSVCZCJOGMVFOUHFNJOTUBMMGMVFOUQMVHJOIPTUOBNF ↟ࢲߡ߹ഐझ౟੉ܴ߸ࣻܳ୶о ! ↟ GMVFOUEFMBTUJDTFBSDI ↟ TVEPBQUHFUJOTUBMMMJCDVSMPQFOTTMEFW ↟ TVEPVTSMJCGMVFOUSVCZCJOGMVFOUHFNJOTUBMMGMVFOUQMVHJOFMBTUJDTFBSDI ↟ࣻ૘ѾҗܳFMBTUJDTFBSDI۽੹࣠
  3. GMVFOUEࢸ੿tFUDUEBHFOUUEBHFOUDPOGu IUUQTHJTUHJUIVCDPNTFBQZ NBUDIFYUSBDUFEBQBDIFBDDFTT UZQFUZQFDBTU JUFN@UZQFT TJ[FJOUFHFS DPEFJOUFHFS SFTQPOTF@UJNF@NJDSP@TFDJOUFHFS J EJOUFHFS

    QSFGJYUZQFE NBUDI ! NBUDIUZQFEFYUSBDUFEBQBDIFBDDFTT UZQFIPTUOBNF LFZ@OBNFTFSWFS@IPTU BEE@QSFGJYIPTUOBNF NBUDI ! NBUDIIPTUOBNFUZQFEFYUSBDUFEBQBDIFBDDFTT UZQFFMBTUJDTFBSDI IPTUTFDYYYDPNQVUFBNB[POBXTDPN UZQF@OBNFBDDFTTMPH MPHTUBTI@GPSNBUUSVF MPHTUBTI@QSFGJYMPHTUBTI VUD@JOEFYGBMTF ! CVGGFS CVGGFS@UZQFGJMF CVGGFS@QBUIWBSMPHUEBHFOUCVGGFSBQBDIFBDDFTT FMBTUJDTFBSDI CVGGFS CVGGFS@DIVOL@MJNJUN CVGGFS@RVFVF@MJNJU GMVTI@JOUFSWBM SFUSZ@MJNJU NBUDI *OQVU TPVSDF UZQFUBJM GPSNBU? IPTU<?> <?>  VTFS<?> =< UJNFTUBNQ<?=>> =>  NFUIPE=4  QBUI<?>  =4  DPEF<?>  TJ[F<?>  SFGFSFS<?=>  BHFOU<?=>  SFTQPOTF@UJNF@NJDSP@TFD<?>  QBUIIPNFVCVOUVMPH@NBLFSUNQMPHBDDFTT QPT@GJMFWBSMPHUEBHFOUBQBDIFBDDFTTQPT UBHBQBDIFBDDFTT TPVSDF ! 065165 NBUDIBQBDIFBDDFTT UZQFFYUSBDU@RVFSZ@QBSBNT LFZQBUI BEE@UBH@QSFGJYFYUSBDUFE POMZVJE N NBUDI
  4. ↟ ߓನ౸ਸాೠࢸ஖୶ୌ ↟ KBWBࢸ஖ ↟ FMBTUJDTFBSDIоKBWB۽غয੓য߹بࢸ஖೙ਃ ↟ ۄ੉ࣃझޙઁ۽ӝࠄಁః૑ݾ۾ীחPQFOKELо੓যࢲ׮਺җэ੉ PSBDMFKBWBࢸ஖ ↟

    ࢸ஖ࣽࢲ ↟ TVEPBEEBQUSFQPTJUPSZQQBXFCVQEUFBNKBWB ↟ TVEPBQUHFUVQEBUF ↟ TVEPBQUHFUJOTUBMMPSBDMFKBWBJOTUBMMFS ↟ KBWBWFSTJPO
  5. ↟ FMBTUJDTFBSDIࢸ஖ ↟ ಁః૑ݾ۾୶о ↟ XHFUIUUQQBDLBHFTFMBTUJDTFBSDIPSH(1(,&:FMBTUJDTFBSDI ↟ TVEPBQULFZBEE(1(,&:FMBTUJDTFBSDI ↟ tFUDBQUTPVSDFTMJTUu౵ੌী׮਺ղਊ୶о

    ↟ EFCIUUQQBDLBHFTFMBTUJDTFBSDIPSHFMBTUJDTFBSDIEFCJBOTUBCMFNBJO ↟ ࢸ஖ ↟ TVEPBQUHFUJOTUBMMFMBTUJDTFBSDI ↟ ࢲߡ੤द੘द੗زਵ۽੤द੘ࢸ੿ ↟ TVEPVQEBUFSDEFMBTUJDTFBSDIEFGBVMUT ↟ प೯झ௼݀౟ ↟ FUDJOJUEFMBTUJDTFBSDI\TUBSU]TUPQ]TUBUVT^
  6. ↟ ӝࠄࢸ੿ FUDFMBTUJDTFBSDIFMBTUJDTFBSDIZNM  ↟ DMVTUFSOBNFSPSMBC ↟ э਷௿۞झఠ੉ܴਸо૓FMTо֎౟ਕ௼উী੓ח҃਋௿۞झఠ۽োѾؽӝࠄч FMBTUJDTFBSDI ↟

    OPEFOBNFtFMTGJSTUu ↟ OPEF੉ܴਸഐझ౟١ਵ۽ࢸ੿ೞݶࢲߡীࢲ౵ঈೞӝऔ׮ࢸ੿ೞ૑ঋ਷҃਋݃࠶நܼఠ੉ ܴ઺ےؒ ↟ JOEFYOVNCFS@PG@TIBSET ↟ TIBSEіࣻחੋؙझࢤࢿ੉റীח߸҃੉উؽ ↟ JOEFYOVNCFS@PG@SFQMJDBT ↟ ࠂઁࠄіࣻ ↟ ؘ੉ఠਤ஖١ֿܻझജ҃߸ࣻܳాೠࢸ੿ FUDEFGBVMUFMBTUJDTFBSDI  ↟ t%"5"@%*3uؘ੉ఠ੷੢ਤ஖
  7. FMTਬਊೠ೒۞Ӓੋ ↟ ୭ࣗೠ੄೒۞Ӓੋ਷ࢸ஖ೞחѪ੉ࢲߡ࢚కഛੋীਬਊ ! ↟ IFBE ↟ ࢸ஖ ↟ VTSTIBSFFMBTUJDTFBSDICJOQMVHJOJOTUBMMNPC[FMBTUJDTFBSDIIFBE

    ↟ ௿۞झఠҳࢿ੿ࠁ߂֢٘࠙࢑࢚కഛੋ ! ↟ )2 ↟ ࢸ஖ ↟ TVEPVTSTIBSFFMBTUJDTFBSDICJOQMVHJOJOTUBMMSPZSVTTPFMBTUJDTFBSDI)2 ↟ ੋؙझ࢚కഛੋ߂௿۞झఠࢲߡ߹ܻࣗझ࢚కഛੋ ! ↟ NBSWFM ↟ FMBTUJDTFBSDIীࢲ૒੽ٜ݅঻ਵաѐߊਊীೠ೧ޖܐ
  8. ௿۞झఠ݃ߨ ↟ ই઱੸਷֢۱ਵ۽௿۞झఠҳࢿ੉غҊ࠙ߓоੜؽ ↟ э਷֎౟ਕ௼ী੓ח҃਋௿۞झఠ੉ܴ݅э׮ݶ੗زਵ۽௿۞झఠҳࢿ ↟ э਷֎౟ਕ௼оইפۄݶࢸ੿ਸా೧૒੽ࢲߡݾ۾੘ࢿ ↟ FUDFMBTUJDTFBSDIFMBTUJDTFBSDIZNM ↟

    EJTDPWFSZ[FOQJOHNVMUJDBTUFOBCMFEGBMTF ↟ EJTDPWFSZ[FOQJOHVOJDBTUIPTUT<tYYYYYYYYY tYYYYYYYYY> ↟ ೠࢲߡী݅غ੓ਵݶաݠ૑ী੗زҕਬ ↟ QPSUߣഐחOPEFՙܻాनೞחನ౟IUUQನ౟оইשӝࠄч ↟ "84э਷҃਋೒۞Ӓੋ੉੓যࢲӒѪਸࢎਊೞݶ೧׼҅੿੄ࢲߡٜ਷੗زਵ۽ҳࢿ
  9. ↟ ೒۞Ӓੋ਷ইפ૑݅۽Ӓഛੋীਬਊ ↟ "OHVMBS+4೐۽ં౟۽঑୷೧ઁറਢࢲߡীࢲ٣۩షܻ݅ࢸ੿ ↟ ࢸ஖ ↟ XHFUIUUQTEPXOMPBEFMBTUJDTFBSDIPSHLJCBOBLJCBOBLJCBOBUBSH[ ↟ UBSY[WGLJCBOBUBSH[

    ↟ MOTLJCBOBLJCBOB ↟ ࢸ஖ଵҊޙࢲIUUQXXXFMBTUJDTFBSDIPSHPWFSWJFXLJCBOBJOTUBMMBUJPO ↟ OHJOYࢸ੿ ! TFSWFS\ MJTUFO TFSWFS@OBNFMPDBMIPTU MPDBUJPO\ SPPUIPNFVCVOUVLJCBOB JOEFYJOEFYIUNM ^ ^