ELK部署-Logstash

启动

设为服务

vim /usr/lib/systemd/system/logstash.service

# systemd service file for Elastic-Logstash
[Unit]
Description=Elastic-Logstash Community Server
After=network.target
After=syslog.target
After=nss-lookup.target

[Install]
WantedBy=multi-user.target

[Service]
User=es
Group=es

# Start main service
ExecStart=/usr/local/logstash-7.16.2/bin/logstash

Restart=on-failure
RestartPreventExitStatus=1

systemctl enable logstash

启动

systemctl start logstash
systemctl status logstash