1. 编写logstash.yaml配置文件
---
apiVersion: v1
kind: Service
metadata:name: logstash
spec:type: ClusterIPclusterIP: Noneports:- name: logstash-tcpport: 5000targetPort: 5000- name: logstash-beatsport: 5044targetPort: 5044- name: logstash-apiport: 9600targetPort: 9600selector:app: logstash
---
apiVersion: v1
kind: ConfigMap
metadata:name: logstash-config
data:# 指定配置文件的内容logstash.yml: |http.host: 0.0.0.0xpack.monitoring.elasticsearch.hosts: [ "http://elasticsearch:9200" ]
---
apiVersion: v1
kind: ConfigMap
metadata:name: logstash-pipeline-config
data:# 指定配置文件的内容logstash.conf: |-input {beats {port => 5044}tcp {port => 5000}}output {elasticsearch {hosts => "elasticsearch:9200"user => "elastic"password => "changeme"ecs_compatibility => disabled}}
---
apiVersion: apps/v1
kind: StatefulSet
metadata:name: logstash
spec:serviceName: logstashreplicas: 1selector:matchLabels:app: logstashtemplate:metadata:labels:app: logstashspec:containers:- name: logstashimage: harbor.cool.team/common/logstash/logstash:7.16.2imagePullPolicy: IfNotPresentports:- name: logstash-tcpcontainerPort: 5000protocol: "TCP"- name: logstash-beatscontainerPort: 5044protocol: "TCP"- name: logstash-apicontainerPort: 9600protocol: "TCP"volumeMounts:- name: logstash-conf #挂载配置mountPath: /usr/share/logstash/config/logstash.ymlsubPath: logstash.yml- name: logstash-pipeline-confmountPath: /usr/share/logstash/pipeline/logstash.confsubPath: logstash.confvolumes:- name: logstash-confconfigMap:name: logstash-config- name: logstash-pipeline-confconfigMap:name: logstash-pipeline-configrestartPolicy: Always
2. 在k8s页面，wms命名空间导入logstash.yaml配置文件
3. 查看部署信息
4. 查看配置信息
5. 查看Pod日志信息，检查是否有报错信息
