Category Archives: Kibana

[Kibana] Time range search

Posted on 2015 年 02 月 06 日 by cowman.chiang

If I want to search information within these seven days.

@timestamp:["now-7d" TO "now"]

1 2	@timestamp:["now-7d" TO "now"]

If I want to search information between 2015-01-01 and 2015-01-31.

@timestamp:["2015-01-01" TO "2015-01-31"]

1 2	@timestamp:["2015-01-01" TO "2015-01-31"]

If I want to search information between 2015-02-01 13:00:00 and 2015-02-01 18:00:00.

@timestamp:["2015-02-01T13:00:00" TO "2015-02-01T18:00:00"]

1 2	@timestamp:["2015-02-01T13:00:00" TO "2015-02-01T18:00:00"]

Posted in Kibana | Leave a comment

[Apache] Proxypass

Posted on 2015 年 01 月 27 日 by cowman.chiang

Because the default web port of Elasticsearch is 9200. And I want to change it with 80. Maybe I could use the proxypass function. enable the proxy, and restart apache

a2enmod proxy
a2enmod proxy_http
service apache2 restart

a2enmod proxy

a2enmod proxy_http

service apache2 restart

add following into the /etc/apache2/sites-enabled/000-default.conf

<VirtualHost *:80>
       ProxyPreserveHost On
       ProxyVia full

       <proxy>
         Order deny,allow
         Allow from all
       </proxy>

       ProxyPass        /kibana9200  http://localhost:9200
</VirtualHost>

ProxyPreserveHost On

ProxyVia full

<proxy>

Order deny,allow

Allow from all

</proxy>

ProxyPass /kibana9200 http://localhost:9200

</VirtualHost>

edit the kibana … Continue reading →

Posted in Apache, Elasticsearch, Kibana | Leave a comment

Logstash + Redis + Nginx + Kibana + ElasticSearch

Posted on 2014 年 12 月 26 日 by cowman.chiang

環境: Ubuntu 14.04 x64 server 安裝Java環境

sudo apt-get install openjdk-7-jdk

1	sudo apt-get install openjdk-7-jdk

下載Logstash壓縮檔

cd /tmp
curl -O https://download.elasticsearch.org/logstash/logstash/logstash-1.4.0.tar.gz
tar zxvf logstash-1.4.0.tar.gz -C /opt/logstash

cd /tmp

curl -O https://download.elasticsearch.org/logstash/logstash/logstash-1.4.0.tar.gz

tar zxvf logstash-1.4.0.tar.gz -C /opt/logstash

基本測試

cd /opt/logstash
bin/logstash -e 'input { stdin { } } output { stdout {} }
# 試著打幾個字看看

cd /opt/logstash

bin/logstash -e 'input { stdin { } } output { stdout {} }

# 試著打幾個字看看

安裝Elasticsearch

cd /tmp
wget https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-1.1.1.deb
sudo dpkg -i elasticsearch-1.1.1.deb

cd /tmp

wget https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-1.1.1.deb

sudo dpkg -i elasticsearch-1.1.1.deb

設定Elasticsearch 編輯/etc/elasticsearch/elasticsearch.yml 取消cluster.name、node.name的注解並改成自己想要的重新啟動Elasticsearch

sudo service elastic search restart

1	sudo service elastic search restart

安裝Redis

sudo apt-get install redis-server

1	sudo apt-get install redis-server

設定Redis 編輯/etc/redis/redis.conf，使用

bind 0.0.0.0
取代
bind 127.0.0.1

bind 0.0.0.0

取代

bind 127.0.0.1

重新啟動Redis

sudo service redis-server restart

1	sudo service redis-server restart

下載Kibana

cd /tmp
wget https://download.elasticsearch.org/kibana/kibana/kibana-3.0.0.tar.gz
mkdir -p /var/www/kibana
tar xvfz kibana-3.0.0.tar.gz -C /var/www/kibana

cd /tmp

wget https://download.elasticsearch.org/kibana/kibana/kibana-3.0.0.tar.gz

mkdir -p /var/www/kibana

tar xvfz kibana-3.0.0.tar.gz -C /var/www/kibana

編輯Kibana設定檔編輯/var/www/kubana/config.js，使用

elasticsearch: "http://本機IP:9200"
取代
elasticsearch: "http://"+window.location.hostname+":9200"

elasticsearch: "http://本機IP:9200"

取代

elasticsearch: "http://"+window.location.hostname+":9200"

設定Logstash Server設定檔編輯/etc/logstash/server.conf

input {
  redis {
    host => "本機IP"
    type => "redis"
    data_type => "list"
    key => "logstash"
  }
}
output {
stdout { }
  elasticsearch {
    cluster => "elasticsearch"
  }
}

input {

redis {

host => "本機IP"

type => "redis"

data_type => "list"

key => "logstash"

}

output {

stdout { }

elasticsearch {

cluster => "elasticsearch"

}

測試Logstash能否以Server啟動

/opt/logstash/bin/logstash --verbose -f /etc/logstash/server.conf

1	/opt/logstash/bin/logstash --verbose -f /etc/logstash/server.conf

安裝Nginx

sudo apt-get install nginx

1	sudo apt-get install nginx

設定Nginx 編輯/etc/nginx/sites-enabled/default，使用 … Continue reading →

Posted in Elasticsearch, Kibana, Logstash, Redis | Leave a comment

Category Archives: Kibana

[Kibana] Time range search

[Apache] Proxypass

Logstash + Redis + Nginx + Kibana + ElasticSearch

Categories