146 lines
4.7 KiB
Bash
146 lines
4.7 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# 本脚本为一键式安装 ELK 脚本
|
|
# 执行脚本前，请先执行以下命令，创建用户
|
|
# groupadd elk
|
|
# useradd -g elk elk
|
|
# passwd elk
|
|
|
|
# 获取当前设备IP
|
|
IP=""
|
|
getDeviceIp() {
|
|
IP=`ifconfig eth0 | grep "inet" | awk '{ print $2}' | awk -F: '{print $2}'`
|
|
if [ "$IP" == "" ]; then
|
|
IP=`ifconfig eth0 | grep "inet" | awk '{ print $2}'`
|
|
fi
|
|
if [ "$IP" == "" ]; then
|
|
IP=`ifconfig ens32 | grep "inet"|grep "broadcast" | awk '{ print $2}' | awk -F: '{print $1}'`
|
|
fi
|
|
|
|
if [ "${IP}" == "" ]; then
|
|
echo " "
|
|
echo " 请输入服务器IP地址................ "
|
|
echo " "
|
|
exit 0
|
|
else
|
|
echo "当前设备IP: $IP"
|
|
fi
|
|
}
|
|
|
|
# 检查文件是否存在，不存在则退出脚本
|
|
checkFileExist() {
|
|
if [ ! -f "$1" ]
|
|
then
|
|
echo "关键文件 $1 找不到，脚本执行结束"
|
|
exit 0
|
|
fi
|
|
}
|
|
|
|
init() {
|
|
mkdir -p ${ELASTIC_SOFTWARE_PATH}
|
|
getDeviceIp
|
|
}
|
|
|
|
# 安装 elasticsearch
|
|
installElasticsearch() {
|
|
cd ${ELASTIC_SOFTWARE_PATH}
|
|
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-${version}.tar.gz
|
|
tar -xzf elasticsearch-${version}.tar.gz
|
|
}
|
|
|
|
installRuby() {
|
|
cd ${RUBY_SOFTWARE_PATH}
|
|
wget https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.0.tar.gz
|
|
tar -xzf ruby-2.5.0.tar.gz
|
|
cd ruby-2.5.0
|
|
./configure
|
|
make & make install
|
|
}
|
|
|
|
# 安装 logstash
|
|
installLogstash() {
|
|
cd ${ELASTIC_SOFTWARE_PATH}
|
|
wget https://artifacts.elastic.co/downloads/logstash/logstash-${version}.tar.gz
|
|
tar -xzf logstash-${version}.tar.gz
|
|
}
|
|
|
|
# 安装 kibana
|
|
installKibana() {
|
|
cd ${ELASTIC_SOFTWARE_PATH}
|
|
wget https://artifacts.elastic.co/downloads/kibana/kibana-${version}-linux-x86_64.tar.gz
|
|
tar -xzf kibana-${version}-linux-x86_64.tar.gz
|
|
}
|
|
|
|
# 安装 filebeat
|
|
installFilebeat() {
|
|
cd ${ELASTIC_SOFTWARE_PATH}
|
|
wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-${version}-linux-x86_64.tar.gz
|
|
tar -zxf filebeat-${version}-linux-x86_64.tar.gz
|
|
}
|
|
|
|
# 替换 Elasticsearch 配置
|
|
# 1. 替换 192.168.0.1 为本机 IP
|
|
replaceElasticsearchConfig() {
|
|
cp ${ELASTIC_SOFTWARE_PATH}/elasticsearch-${version}/config/elasticsearch.yml ${ELASTIC_SOFTWARE_PATH}/elasticsearch-${version}/config/elasticsearch.yml.bak
|
|
sed -i "s/#network.host: 192.168.0.1/network.host: ${IP}/g" ${ELASTIC_SOFTWARE_PATH}/elasticsearch-${version}/config/elasticsearch.yml
|
|
touch ${ELASTIC_SOFTWARE_PATH}/elasticsearch-${version}/bin/nohup.out
|
|
}
|
|
|
|
replaceLogstashConfig() {
|
|
cp ${ELASTIC_SOFTWARE_PATH}/logstash-${version}/config/logstash.yml ${ELASTIC_SOFTWARE_PATH}/logstash-${version}/config/logstash.yml.bak
|
|
sed -i "s/# http.host: \"127.0.0.1\"/ http.host: ${IP}/g" ${ELASTIC_SOFTWARE_PATH}/logstash-${version}/config/logstash.yml
|
|
touch ${ELASTIC_SOFTWARE_PATH}/logstash-${version}/bin/nohup.out
|
|
cd ${ELASTIC_SOFTWARE_PATH}/logstash-${version}/bin
|
|
wget https://github.com/dunwu/linux-notes/blob/master/codes/deploy/tool/elk/config/logstash.conf
|
|
}
|
|
|
|
# 替换 Kibana 配置
|
|
# 1. 替换 localhost 为本机 IP
|
|
replaceKibanaConfig() {
|
|
cp ${ELASTIC_SOFTWARE_PATH}/kibana-${version}-linux-x86_64/config/kibana.yml ${ELASTIC_SOFTWARE_PATH}/kibana-${version}-linux-x86_64/config/kibana.yml.bak
|
|
sed -i "s/#server.host: \"localhost\"/server.host: ${IP}/g" ${ELASTIC_SOFTWARE_PATH}/kibana-${version}-linux-x86_64/config/kibana.yml
|
|
sed -i "s/#elasticsearch.url: \"http://localhost:9200\"/#elasticsearch.url: \"${IP}\"/g" ${ELASTIC_SOFTWARE_PATH}/kibana-${version}-linux-x86_64/config/kibana.yml
|
|
touch ${ELASTIC_SOFTWARE_PATH}/kibana-${version}-linux-x86_64/bin/nohup.out
|
|
}
|
|
|
|
# 替换 Filebeat 配置
|
|
replaceFilebeatConfig() {
|
|
cp ${ELASTIC_SOFTWARE_PATH}/filebeat-${version}-linux-x86_64/filebeat.yml ${ELASTIC_SOFTWARE_PATH}/filebeat-${version}-linux-x86_64/filebeat.yml.bak
|
|
cd ${ELASTIC_SOFTWARE_PATH}/filebeat-${version}-linux-x86_64
|
|
wget https://github.com/dunwu/linux-notes/blob/master/codes/deploy/tool/elk/config/filebeat.yml
|
|
sed -i 's/127.0.0.1/'"${IP}"'/g' ${ELASTIC_SOFTWARE_PATH}/filebeat-${version}-linux-x86_64/filebeat.yml
|
|
}
|
|
|
|
# 为 elk.elk 用户设置权限
|
|
setPrivilegeForUser() {
|
|
chown -R elk.elk ${ELASTIC_SOFTWARE_PATH}
|
|
chown -R elk.elk /var/log/
|
|
}
|
|
######################################## MAIN ########################################
|
|
echo -e "\n>>>>>>>>> install elk"
|
|
|
|
version=6.1.1
|
|
RUBY_SOFTWARE_PATH=/opt/software/ruby
|
|
ELASTIC_SOFTWARE_PATH=/opt/software/elastic
|
|
ELASTIC_SETTINGS_PATH=/opt/software/elastic/settings
|
|
|
|
init
|
|
|
|
installElasticsearch
|
|
replaceElasticsearchConfig
|
|
|
|
installLogstash
|
|
replaceLogstashConfig
|
|
|
|
installKibana
|
|
replaceKibanaConfig
|
|
|
|
installFilebeat
|
|
replaceFilebeatConfig
|
|
|
|
# 最后，将启动脚本下载到本地
|
|
mkdir -p /home/zp/script
|
|
wget -P /home/zp/script "https://raw.githubusercontent.com/dunwu/linux/master/codes/deploy/tool/elk/boot-elk.sh"
|
|
#setPrivilegeForUser
|
|
|